NewApp Digest
search bot

Surface

The Fault Line Spreads: Azure’s September CVE Cluster Now Covers PostgreSQL and Billing
Tech Optimizer
September 28, 2026

The Fault Line Spreads: Azure’s September CVE Cluster Now Covers PostgreSQL and Billing

Two newly identified Critical CVEs have expanded Microsoft's September identity infrastructure vulnerabilities to over ten verified weaknesses across more than ten distinct services. The Azure Database for PostgreSQL is vulnerable to CVE-2026-85878, an Improper Authorization flaw (CWE-285) with a CVSS score of 9.9. Azure Billing is impacted by CVE-2026-62874, which presents an Insufficient Data Authenticity Verification issue (CWE-345) with a CVSS score of 10.0. Both vulnerabilities were disclosed on September 18 and validated by Tenable and MITRE. CVE-2026-85878 allows an authorized attacker to elevate privileges over the network with minimal complexity, while CVE-2026-62874 requires no authentication, enabling unauthenticated attackers to jeopardize financial integrity. The vulnerability cluster first emerged during the Patch Tuesday cycles on September 3 and September 8, with initial reports highlighting critical flaws in core services. Other September disclosures include CVE-2026-83711 (Azure AD B2C, CVSS 10.0), CVE-2026-70352 (Azure AI Language, CVSS 10.0), CVE-2026-83941 (Entra ID, CVSS 9.9), CVE-2026-62916 (Entra ID, CVSS 9.1), CVE-2026-69857 (Azure Cosmos DB, CVSS 8.5), and CVE-2026-69854 (Spring Cloud Azure, CVSS 9.0). Activity heightened between September 17 and 18 with the introduction of CVE-2026-77903 (Microsoft Dataverse, CVSS 9.0) and CVE-2026-69843 (Microsoft Fabric, CVSS 10.0). The attack surface has broadened from authentication concerns to encompass trust in AI endpoints, data storage locations, and billing verification processes. Seven out of the ten vulnerabilities are unauthenticated, and all issues were addressed through server-side fixes by Microsoft. The extensive range of affected services suggests these vulnerabilities indicate a shared architectural dependency on authentication logic.
Copilot+ PCs are fading away just as Microsoft doubles down on Copilot
Winsage
September 27, 2026

Copilot+ PCs are fading away just as Microsoft doubles down on Copilot

Microsoft has unveiled two new Surface PCs, the Surface Pro 12-inch and Surface Laptop 13-inch, which will not carry the Copilot+ branding. The redesigned Surface Mouse is set to launch later this month with a soft-touch finish and improved haptics. The decision to not label the new Surface devices as Copilot+ PCs reflects a shift in Microsoft's AI PC development strategy, influenced by feedback from manufacturers. Microsoft’s branding strategy has faced scrutiny due to the extensive use of the Copilot name across various products, leading to confusion among users. However, Microsoft clarified that the discontinuation of Copilot+ PCs does not indicate the end of the Copilot platform, which is set to evolve with significant enhancements.
Android Auto 17.8 Now Available for Download for All Users
AppWizard
September 27, 2026

Android Auto 17.8 Now Available for Download for All Users

Google has begun rolling out Android Auto 17.8 for production devices, which will be available gradually through the Google Play Store. Users may receive updates in waves, and some may find their version already current. A stand-alone APK installer is also available for those seeking immediate access. The update introduces a new full-screen GameSnacks experience and restores signal bars for some users. Additionally, Google Maps has added new pop-ups for stop signs and traffic lights to enhance navigation. The full build number for this update is 17.8.6638.
What Is End Point Security And How Does It Work?
Tech Optimizer
September 26, 2026

What Is End Point Security And How Does It Work?

Endpoint security is a suite of technologies and processes designed to protect devices connected to a business network from cyber threats. It includes various devices such as laptops, smartphones, tablets, servers, and IoT devices. Endpoint security employs a multi-layered approach, scanning for malware, regulating applications, and monitoring device activity for unusual behavior. It is distinct from antivirus software, encompassing a broader range of protective measures, including firewalls, encryption, application controls, patch management, and Endpoint Detection and Response (EDR). The rise of remote work and the increasing number of devices create a larger attack surface, making endpoint security essential for preventing breaches and safeguarding business operations.
F-Droid app store thumbs its nose at Google's dev crackdown
AppWizard
September 25, 2026

F-Droid app store thumbs its nose at Google’s dev crackdown

F-Droid has released version 2.0 of its Android app, marking its most significant upgrade in a decade. The update features a modern interface, improved app discovery, enhanced search functionality, and a streamlined user experience. The app now uses Kotlin and Jetpack Compose for its UI, allowing for quicker future improvements. However, F-Droid faces challenges due to Google's upcoming developer registration requirements set to take effect in August 2025, which could threaten its existence and that of other independent app distribution sources. The new version includes a redesigned Discover screen, automatic app updates, and benefits from the European Union’s Digital Markets Act. Despite these enhancements, the F-Droid team is concerned about the potential impact of Google's policies on their platform.
Poll: Which new Surface device are you most excited about?
Winsage
September 24, 2026

Poll: Which new Surface device are you most excited about?

Microsoft has updated its Surface lineup, introducing the refreshed Surface Pro with a 12-inch display and the Surface Laptop with a 13-inch screen, both powered by Snapdragon X2 processors. The Surface Mouse has been revived as part of this update. Microsoft will showcase the Surface Laptop Ultra at an upcoming event. The Surface portfolio has undergone significant changes, including the discontinuation of the Surface Hub, Surface Go, Surface Laptop Go, Surface Studio, Surface Laptop Studio, Surface Duo, Surface Book, Surface Headphones, and Surface Earbuds. The current lineup is more focused, allowing Microsoft to concentrate on delivering high-quality devices.
The Copilot+ PC brand is dead: Microsoft and PC makers quietly pull back on tarnished Windows 11 AI PC branding
Winsage
September 24, 2026

The Copilot+ PC brand is dead: Microsoft and PC makers quietly pull back on tarnished Windows 11 AI PC branding

In 2024, Microsoft and Qualcomm launched "Copilot+ PCs" to promote AI-first computing, but faced challenges when security concerns led to the postponement of the key feature, Recall. A Microsoft representative stated that while the latest Surface PCs met Copilot+ specifications, they would not carry the branding. Qualcomm's Kedar Kondap explained that the branding aimed to define devices capable of advanced NPU experiences, but those experiences could still be provided without the Copilot+ label. NVIDIA chose not to associate its RTX Spark platform with Copilot+, indicating a lack of market resonance for the branding. Consequently, both OEMs and Microsoft are moving away from the Copilot+ label, despite maintaining the specification baseline for the experiences.
Microsoft’s new AI‑powered Ink Canvas aims to reinvent how Surface users write, sketch, and create — debuts alongside refreshed smaller Surface Pro and Surface Laptop
Winsage
September 24, 2026

Microsoft’s new AI‑powered Ink Canvas aims to reinvent how Surface users write, sketch, and create — debuts alongside refreshed smaller Surface Pro and Surface Laptop

Microsoft has introduced updates to its Surface lineup, including the Surface Pro 12-inch (2nd Edition), Surface Laptop 13-inch (2nd Edition), and a new Surface Mouse, all powered by Snapdragon X2 Plus processors. Additionally, Microsoft launched Microsoft Ink Canvas, a pen-first workspace that integrates handwriting, sketches, annotations, and AI functionalities. This follows an update to the Ink Workspace in Windows 11, which allows users to pin applications for easier access to inking experiences. The integration of AI with inking capabilities is part of a broader trend in the tech industry.
Search