Businesses are increasingly using consumer-facing chat applications for staff communication and document sharing. Zenzap is a new private messaging platform led by Guy Weiss, designed for organizational context and compliance, featuring AI capabilities. The startup has secured funding from investors such as Bessemer, Lightspeed, and individual backers, marking Weiss's first fundraising effort after previously bootstrapping an e-commerce platform. Zenzap, founded in 2022, aims to serve various industries, offering features such as group chats, task management, calendar integration, and AI-powered tools on both free and paid plans. It currently counts clients like FedEx, Taco Bell, and Starbucks, and has a team of 50 employees across multiple locations. Zenzap's versatility is emphasized, as it targets a broader audience beyond developers, focusing on the majority of employees using personal messaging applications.
Field sales applications, recruitment tools, and property management systems can integrate with messaging platforms on Android devices, addressing the need for users to view conversations directly within the app. A unified messaging API simplifies the integration process for developers, as each messaging channel has distinct authentication methods and message formats. The Android application should only communicate with a backend that interacts with the messaging API for security, event handling, and policy enforcement.
Users can link their accounts through a hosted authentication link, reducing coding efforts. The unified API supports various platforms, including WhatsApp, LinkedIn, Telegram, Instagram, Gmail, and Outlook. When a message arrives, the messaging API triggers a webhook, and the relay service verifies the request, stores the message, identifies users, and sends push notifications via Firebase Cloud Messaging (FCM).
To ensure functionality in offline scenarios, the app should render conversation lists from local storage and manage outgoing messages with a WorkManager. Attachments should be handled efficiently by listing them as metadata and downloading them on demand, while uploads should involve client-side compression and resumable requests. By following this approach, developers maintain a single conversation model and sync engine, abstracting complexities associated with multiple messaging providers.
A 59-year-old courier in Moscow is facing a criminal case for sharing episodes of the series "Verdict" online after downloading them from a streaming platform and uploading them to torrent trackers. The rights holder identified the leak, which garnered over 150,000 views, leading to an estimated financial damage of 150 million rubles. The Moscow Investigative Committee has initiated a criminal case against him, potentially resulting in a prison sentence of up to six years, along with fines and compensation for the online cinema.
Microsoft is redesigning the search menu in Windows, set to launch this fall, allowing users to input text commands directly within the menu. This new functionality will enable users to quickly toggle settings like dark mode and Do Not Disturb mode. The updated menu will also facilitate communication with the new Copilot app without needing to launch it separately.
The Phone by Google app is reintroducing the Contacts tab to the bottom navigation bar, which had been absent since last year. This update is currently available only to beta users, with reports of the feature's return on platforms like GApps and Leaks Telegram. The latest beta version (240.0.98) on a Pixel 9 has shown this feature, while previously, the Contacts tab was moved to a sidebar. Some users have not yet seen the reappearance of the Contacts tab, indicating a gradual rollout. In the current stable version, users only see two tabs at the bottom, with the Contacts option accessible via a sidebar menu. The timeline for a wider release of the update remains uncertain.
Motorola is enhancing the Android experience with a cleaner software interface and extended support timelines. The dedicated AI key on select Motorola devices has limited functionality, traditionally controlled by Motorola. The MotoKey Plus app allows users to customize the AI key, making it a programmable shortcut button for various actions, including launching the flashlight, taking screenshots, controlling media playback, accessing notifications, and launching apps. Users can adjust the responsiveness of the AI key by changing double-tap timing and hold thresholds. Feedback from early adopters has been positive, though some have faced issues with the mute function. MotoKey Plus is currently available only through sideloading and is not open source, but a Google Play release is planned. The current version on GitHub is 1.1.1, while the Telegram channel has version 1.1.7 with fixes for press-and-hold behavior.
The operators behind RatHat have created an advanced Android banking trojan that allows control of infected devices through a web console. Since April 2026, nearly 100 instances of this console have been identified, indicating a malware-as-a-service model. The console collects sensitive data from compromised phones, including text messages and passwords. It uses Google's Gemini AI to assess victims' bank balances, categorizing them into high-value and mid-value segments, but does not facilitate financial transactions.
The malware has remained largely unchanged since late 2025, but the console has seen significant updates, leading to three new versions: BlackCat Remote Control Management, Panda Workshop V5, and V6. These versions serve as both control interfaces and build tools for creating and distributing malware. The latest version includes templates for deceptive download pages.
RatHat infiltrates devices via text messages and online ads, requesting Accessibility access to read screens and simulate user interactions. This access allows the malware to activate wireless debugging and connect to the Android Debug Bridge (ADB), giving operators elevated privileges to execute commands. A Go program can be deployed to maintain control, even after the app is uninstalled.
Cleafy has tracked console deployments through web code analysis, noting that many IP addresses originate from a Singapore-registered network. The initial console version allowed operators to choose AI providers, but the latest exclusively uses Gemini. RatHat also utilizes Gemini on infected devices to determine tap locations based on screen layouts.
Cleafy has compiled indicators related to the consoles' command-and-control servers, download links, and malware samples, including specific domains, IP addresses, and MD5 hashes. The consoles often use web addresses starting with "admin." and inexpensive top-level domains. Security tools are advised to monitor processes running under the shell user on affected devices.
Google Messages is exploring a single-tap feature for initiating voice recordings in RCS chats, as seen in the beta version messages.android2026092101_RC00. This change aims to simplify the current two-step process of sending voice notes, which involves tapping the waveform icon and then the microphone icon or long-pressing the waveform icon. While the single-tap feature could enhance accessibility, it raises concerns about accidental activation. Other messaging platforms, like Telegram, require a long press to start a voice note to minimize unintentional recordings. WhatsApp for Android has already implemented a similar single-tap feature. There is hope that Google will introduce a toggle in the settings menu to allow users to choose between the new single-tap method and the traditional approach.
The Max messenger, developed by VK, has significant user tracking capabilities. A report from InterSecLab revealed that:
- Max's features can vary for individual users without app updates.
- It lacks end-to-end encryption, allowing VK access to messages, even in "secret chats."
- Each account can be configured to perform specific actions, such as decrypting messages on VK's servers and blocking messages if a VPN is detected.
- Upon launching, Max reports the user’s network environment to VK, including their public IP address and mobile carrier.
- The app uploads users’ entire address books unencrypted to VK's servers, accessing contacts of non-registered individuals.
- A phone number query can reveal extensive user information without notification.
- Max stops functioning if it detects a VPN, requiring users to disable it to send messages, although workarounds exist.
- New users receive a curated list of recommended channels, primarily featuring state media and pro-government figures.
