supply chain Archives

AppWizard

October 9, 2026

Your Android phone could be infected before you turn it on

Bitdefender researchers have identified a malware campaign called Midnight Mimosa that can be embedded in the software of low-cost Android devices before sale. This malware operates stealthily, allowing it to install and remove applications without user knowledge, generate fraudulent advertising activity, and convert devices into residential-proxy relay nodes for a botnet. It has been found on MediaTek-based, white-label devices marketed under misleading names. Users should be cautious of suspiciously cheap devices and look for signs of infection, such as unexplained ads, unfamiliar apps, sudden battery drain, and discrepancies in model names. Standard uninstallation or factory resets may not remove this malware, and users are advised to update their devices, review app lists, and contact sellers for refunds or replacements if they suspect infection. Mobile protection solutions can help monitor app behavior and alert users to potential threats.

Winsage

October 9, 2026

A Medical Emergency Forced A User To Downgrade From Windows 11 26H2 To Windows 10, But The Matter Is Being Blown Way Out Of Proportion

A user known as “u/Shanaudio” reverted to Windows 10 after experiencing frustration with the Windows 11 26H2 update. Following the update, he faced a family medical emergency and needed to research medical information online. The installation of the built-in Windows language input method took 20 minutes, compared to just 2 minutes on Windows 10. This delay prompted him to downgrade to the older operating system.

AppWizard

October 9, 2026

Thousands of cheap Android phones shipped with ad-fraud malware

Researchers from Bitdefender have discovered that thousands of inexpensive Android devices are preloaded with malware called "Midnight Mimosa," which generates fraudulent advertising revenue. This malware is embedded in the device firmware before the first power-up, making it impossible for users to uninstall. It operates with system-level privileges, allowing it to install or remove applications without user consent and to download additional code. The malware primarily aims for financial gain through advertising and click fraud, while also gathering information about devices. Bitdefender has detected this malware on thousands of devices across over 150 countries, with the highest concentrations in Mexico, France, and Italy, followed by the United States, Germany, Brazil, and Spain. Many affected devices are low-cost, white-label, or counterfeit models, often sold online. The malware stealthily installs legitimate-looking applications that display ads in invisible windows, generating ad impressions without user awareness. Bitdefender identified at least 32 disguised applications and found 13 apps in the Google Play Store with similar ad-fraud code. The source of the malware remains unidentified, but some affected firmware was signed with certificates from Shenzhen Zediel, a Chinese company. The researchers suggest that the malware could have been introduced at various stages of the supply chain, potentially by manufacturers or intermediaries.

Winsage

October 1, 2026

One Of Qualcomm’s Earliest SoCs To Support Windows And Help The Company Set Up The Snapdragon X Family Will No Longer Be Compatible With Microsoft’s Next Update

Qualcomm's Snapdragon 850 will no longer be compatible with Windows 11 following the upcoming update to version 27H2. The last supported update for the Snapdragon 850 will be Windows 11 version 26H2, which promises 24 months of support, including essential security updates. After this period, devices powered by the Snapdragon 850 will not receive further patches. Microsoft has previously ceased support for the older Snapdragon 835, and while there is no official explanation for the Snapdragon 850's discontinuation, there is a possibility that it may still function with future updates despite lack of support.

Winsage

September 28, 2026

A Windows 10 Update Was Force Triggering Copilot To Run Every Time A File Was Clicked, Leading To Frequent Crashes That Logged The Culprit As Microsoft Edge

Microsoft's Windows 10 update "KB5126256," intended as a licensing preparation package for Extended Security Updates, has caused issues for users, including one Reddit user whose File Explorer crashes when clicking on files due to the automatic activation of the Copilot feature. The crashes were misleadingly attributed to Microsoft Edge, but further investigation revealed they were linked to "mscopilot_proxy.exe" and the module "ShellEh6055x64.dll," associated with the 4t Tray Minimizer application. Users have reported that uninstalling problematic updates can provide temporary relief, while some have chosen to disable updates entirely, despite Windows not offering a complete option to do so.

AppWizard

September 19, 2026

Why ESG reporting standards matter in the Android and mobile tech ecosystem

ESG reporting standards are becoming increasingly important in mobile technology, affecting various aspects such as data management, material sourcing, energy consumption, privacy, supply chain dynamics, and product accountability. The lifecycle of mobile devices involves raw material sourcing, component manufacturing, device assembly, shipping, marketing, sales, updates, repairs, trade-ins, and disposal. Companies must understand ESG standards to create coherent sustainability narratives and may need to disclose supplier practices, carbon emissions, and governance documentation when partnering with larger firms. Consumers are now asking more questions about the longevity of software updates, repairability, data collection, packaging design, and the accountability of product creators. The rise of connected devices complicates ESG reporting due to extended product lifecycles and the need for ongoing software support. Companies should track product lifespan estimates, warranty data, repair trends, and update schedules to improve product quality and ESG reporting credibility. Emerging tech companies can start their ESG journey by cataloging product claims, consolidating evidence, designating ownership of records, and reviewing product lifecycle information. Global sustainability frameworks exist but may not align with consumer needs for straightforward product information. Successful mobile tech companies will need to bridge formal reporting requirements with accessible product-level communication. Trust and transparency in practices will increasingly influence consumer choices in mobile technology.

Tech Optimizer

September 16, 2026

Best Antivirus for Windows 2026: 5 to Install, 1 to Avoid

Windows is the only desktop platform where antivirus software is essential. Microsoft has patched many vulnerabilities, but the OS still allows installations from unverified sources and connects to potentially untrustworthy networks. As of 2026, the top antivirus solutions for Windows include: - Norton 360: Best overall, with a full scan time of 13 minutes and 22 seconds, robust firewall, and up to 250 GB cloud backup. - Bitdefender: Best for older PCs, maintaining peak CPU usage at 11% and memory at 183 MB during scans. - Avast One: Best free option for Windows 11, achieving a perfect score in AV-TEST. - NordVPN Threat Protection Pro: Best for VPN users, blocking 90% of malware. - McAfee+: Best for households with multiple devices, offering unlimited coverage but is the slowest scanner. - Microsoft Defender: Best free option included with Windows, awarded Top Product by AV-TEST. Norton 360 has a 99.8% detection rate and offers a 60-day refund window. Bitdefender also has a 99.8% detection rate with low resource usage. Avast's free version is effective, while NordVPN provides integrated malware protection for existing VPN users. McAfee is suitable for large households but has slower performance. Microsoft Defender is adequate for single users practicing safe browsing but lacks multi-device support. Kaspersky is unavailable in the U.S. due to supply chain concerns.

AppWizard

September 15, 2026

Active Exploitation Alert: Threat Actors Abuse Anthropic Claude AI to Extract Secrets from 1.8M Android Apps in Major Credential Theft Campaign

Between December 2025 and August 2026, a coalition of advanced threat actors exploited the Claude AI model by extracting sensitive information from approximately 1.8 million Android applications. The operation involved groups such as ShinyHunters, Midnight Blizzard (APT29/Nobelium), and the Chinese-speaking entity GTG-10007. They automated the mass download, decompilation, and analysis of Android APKs for hardcoded credentials, API keys, and authentication tokens, leading to extensive credential theft and breaches across various sectors. The attack utilized a distributed pipeline on ten AWS EC2 instances to download APKs, which were then scanned using TruffleHog. Verified secrets were organized and routed in real-time to a private Telegram group for operational deployment. Over 2,100 Azure AD authentication tokens were extracted from more than 40 Microsoft tenants within 34 hours. The operation also included a carding component where stolen payment card data was sold. The tactics employed aligned with several MITRE ATT&CK techniques, including file discovery, unsecured credentials, valid accounts, phishing, and exploitation of remote services. ShinyHunters gained administrative control over targeted environments rapidly, leading to bulk data theft affecting over 200 organizations. Midnight Blizzard automated malware creation and phishing campaigns, targeting government and defense entities. GTG-10007 used Claude for coordinated offensive operations, discovering zero-day vulnerabilities and delivering exploits. Initially, the campaign targeted a broad range of Android APKs but later focused on organizations with valuable credentials across various sectors, including government, technology, and healthcare. Compromises were confirmed in Southeast Asia, Europe, and the Middle East. Organizations are advised to audit Android applications for hardcoded secrets, monitor API key usage, and implement robust security practices to mitigate risks.

Winsage

September 11, 2026

A Windows 11 Software Glitch Resulted In One User’s Account Disappearing From The Login Screen, But Two Registry Fixes Helped Saved Hours Of Troubleshooting

A Windows 11 user experienced an unusual software glitch that caused their account to disappear from the login screen, although the local account remained intact. The original profile and files were still accessible. Two registry modifications were suggested to restore the account's visibility: 1. Navigate to HKEYLOCALMACHINESOFTWAREMicrosoftWindows NTCurrentVersionWinlogonSpecialAccountsUserList, locate the DWORD for the affected account, and change its value from “0” to “1”. 2. Go to HKEYLOCALMACHINESOFTWAREMicrosoftWindowsCurrentVersionPoliciesSystem and change the HideFastUserSwitching key from “1” to “0”. These changes should allow the account to reappear under the login screen's "Other user" section without needing a system restart. Users may need administrative privileges to access the Registry Editor, and a workaround is available for those whose accounts are missing.

AppWizard

September 2, 2026

After playing a bit of Lego Skylines, it seems like a city builder for people who care less about traffic jams and more about decorating

Lego unveiled a new city builder game titled Lego Skylines at Gamescom. The early gameplay preview lasted about 35 minutes, allowing players to construct a small neighborhood with a maximum population of around 50 residents. The game features whimsical animations for building and demolishing structures, vibrant visuals, and customization options for enhancing resident happiness through decorations. Players can complete quests to engage with the community and unlock new building types. Resource management involves constructing farms and factories to create supply chains, with a playful aesthetic evident in the design of buildings like a bread factory resembling a giant toaster. The game allows for a larger city scale of around 2,400 residents across several islands but focuses on a relaxed gameplay experience without catastrophic events.