NewApp Digest
search bot

toolkit

silver Android smartphone
Tech Optimizer
September 7, 2026

Top 10 Best Endpoint Detection & Response (EDR) Solutions in 2026

Endpoint detection and response (EDR) continuously records process, file, registry, and network activity on endpoints, applying behavioral analytics to identify attacker techniques while providing tools for investigation and containment. Several EDR platforms have emerged, each catering to different organizational needs: 1. CrowdStrike: Best overall for its rich telemetry and elite threat intelligence. 2. SentinelOne: Best for autonomous response, featuring strong containment and rollback capabilities. 3. Microsoft Defender for Endpoint: Best value for organizations already using Microsoft 365 E5. 4. Palo Alto Cortex XDR: Best for native data fusion across endpoint, network, and cloud telemetry. 5. Sophos: Best for generalist IT teams due to its user-friendly interface. 6. Trend Micro: Best for server and workload coverage, focusing on cloud and hybrid environments. 7. Bitdefender: Best mid-market value with strong detection capabilities at an accessible price. 8. Trellix: Best for organizations already using Trellix products, offering integrated solutions. 9. Huntress Managed EDR: Best for managed endpoint security, ideal for teams lacking full staffing. 10. Cisco Secure Endpoint: Best for Cisco environments, integrating well with Cisco security solutions. Key differentiators among these platforms include the analyst burden, alert management efficiency, and the impact of retention policies on investigation quality. The evaluation of EDR solutions should consider detection depth, response capabilities, operational costs, and the specific needs of the organization.
You don't want this Sleepwalker backdoor on your Windows machine
Winsage
August 24, 2026

You don’t want this Sleepwalker backdoor on your Windows machine

Malware researcher Dominik Reichel has discovered a sophisticated Windows backdoor named Sleepwalker, which remains dormant in memory until activated by a specially crafted network packet. Sleepwalker uses a 23-instruction command language to execute tasks, including running code in memory and exfiltrating data. It activates through a proprietary activation packet that does not contain readable commands. The malware targets a VMware VMCI and disguises itself as Microsoft's dpapi.dll, mimicking its functions while redirecting calls to a non-existent file. Once it confirms its host process as ERAAgent.exe, it enters a dormant state to evade detection. Sleepwalker monitors for a specific pattern known as a magic packet to decrypt and interpret commands. Commands sent to it are encrypted with AES-256-CCM and must be read in a specific order. The backdoor includes functionalities for sending and concealing data, receiving tasks, and executing programs. Reichel has developed a toolkit to decode Sleepwalker’s bytecode and a mitigation guide for affected users. However, there are significant gaps in knowledge regarding the initial access method, victim identification, and the malware's operator.
"Bombora" is working on a book about Minecraft: the cubic world that conquered the planet
AppWizard
August 19, 2026

“Bombora” is working on a book about Minecraft: the cubic world that conquered the planet

The "Bombora" publishing house is set to release a book by Artem Frolov that explores the phenomenon of Minecraft, tracing its origins to Markus Persson's Infiniminer clone. The book will examine Minecraft's cultural impact and key themes such as its procedurally generated world, building mechanics, survival mode, extensive modding toolkit, and C418's ambient soundtrack. No release date or pricing details for pre-orders have been announced.
Marvel Tōkon's simple but effective combo trials are an elegant tutorial solution that I wish more fighting games had
AppWizard
August 16, 2026

Marvel Tōkon’s simple but effective combo trials are an elegant tutorial solution that I wish more fighting games had

The combo trial in fighting games allows players to experiment with characters but often lacks effectiveness in teaching optimal strategies. Players frequently rely on external resources for better guidance. Marvel Tōkon introduces a new approach with "Level-Up Missions," which encourage players to create their own combos based on specific criteria rather than following explicit inputs. These missions promote creativity and a deeper understanding of character mechanics, with increasing complexity as players progress. While their impact may lessen in competitive play, they provide a valuable exercise in engaging with the game’s systems and offer a more organic learning experience compared to traditional tutorials.
6 hidden Google apps you aren't using, but should be
AppWizard
August 10, 2026

6 hidden Google apps you aren’t using, but should be

YouTube Create is a free mobile video editor that offers features for creating videos for platforms like Instagram Reels, including filters, effects, and AI capabilities for editing. Snapseed is a free photo editing app with professional-grade features and a user-friendly interface, recently updated to include a camera mode. Google Opinion Rewards allows users to earn Play Store credit by completing short surveys. Action Blocks enables users to create customizable buttons for specific smartphone actions, aiding those who struggle with traditional navigation. Gallery is a minimalist photo management app that focuses on viewing images and videos without distractions. Google Lens is a versatile tool that identifies objects, extracts text, translates in real-time, and engages users in conversations about their surroundings.
This 'classic' decades-old SQL injection flaw could let hackers take over entire Windows servers, thanks to a nifty database trick
Winsage
August 7, 2026

This ‘classic’ decades-old SQL injection flaw could let hackers take over entire Windows servers, thanks to a nifty database trick

Security researchers from Huntress discovered a sophisticated SQL Injection (SQLi) attack that led to the deployment of a rare toolkit called Khunt. The attackers exploited a public-facing application backed by an Oracle database by failing to validate user input, allowing malicious SQL commands to be executed. The Khunt toolkit enabled activities such as executing operating system commands, stealing credentials, and exfiltrating registry hive data. Experts recommend robust defense mechanisms, including input sanitation, regular security audits, and the implementation of web application firewalls to protect against such attacks.
Windows 11 could soon get significantly faster with Microsoft's new performance tools
Winsage
August 6, 2026

Windows 11 could soon get significantly faster with Microsoft’s new performance tools

Microsoft has introduced a preview of the Event Tracing for Windows Model Context Protocol (ETW MCP) to enhance Windows performance analysis. This server integrates artificial intelligence to streamline the analysis of Windows Event Tracing (ETW) logs. The ETW MCP allows developers to use tools like GitHub Copilot to examine Event Trace Log (ETL) files, answer queries about the logs, and identify performance issues without manual data sifting. The MCP provides structured, read-only access to processed trace information, enabling developers to query insights such as CPU usage and execution paths. Current features of the ETW MCP include trace processing, querying, multi-trace comparison, symbol-aware analysis, critical path analysis, and regions of interest. The ETW MCP is designed for headless environments and automation, while a forthcoming WPA MCP will provide similar AI-assisted analysis within a graphical interface. The ETW MCP preview is available as the Microsoft.Windows.EventTracing.MCP NuGet package, and Microsoft is seeking developer feedback for further enhancements.
Developers: Beware of Ad Libraries that Betray Your Users’ Location
AppWizard
August 5, 2026

Developers: Beware of Ad Libraries that Betray Your Users’ Location

Advertising companies provide software development kits (SDKs) for mobile app monetization, which often automatically transmit users' location data to ad systems and location data brokers, raising privacy concerns. Many developers and users may be unaware of this data sharing. When developers allow SDKs to collect location data, it poses risks beyond targeted ads, including potential misuse by agencies like ICE and global surveillance. Location data brokers harvest precise movements of individuals, often without their consent, through mobile applications. Some apps directly collaborate with data brokers, while others leak data through advertising SDKs during real-time bidding (RTB) auctions. An incident in 2025 revealed that many apps unknowingly contributed to a location data broker's database. Developers must understand their SDKs' location-sharing practices to mitigate risks. Advertising SDKs can collect location data automatically once users grant permission, without specific permissions for the SDKs themselves. Precise location data can be collected when apps have location permissions, leading to potential privacy violations. Several SDKs have been identified as collecting location data by default, increasing the risk of unintentional data leaks. The Electronic Frontier Foundation (EFF) found that four advertising SDKs collect users' location data by default when location permissions are granted. InMobi encourages location sharing for higher revenue, while BidMachine updated its documentation after EFF's inquiry, confirming precise location data collection. Verve's SDK also collects location data by default but presents a cautious narrative in its Play Store guidance. Huawei's SDK recommends obtaining location permissions to enhance revenue, with default location sharing occurring if permissions are granted. Location data can be shared without users' knowledge or meaningful consent, complicating informed consent issues. The focus on four SDKs does not imply that others adequately protect location data, as many have faced criticism for similar practices. Studies indicate that SDKs often encourage increased data collection through design and documentation, leading to minimal control for developers over data transmission. The EFF's analysis highlights that advertising SDKs incentivize location data sharing through default settings and unclear documentation. Developers should assess third-party SDKs and disable unnecessary data collection. Regulators must hold developers accountable for unlawful data sharing, while legislators should enact laws to protect location privacy and address online behavioral advertising, which drives data tracking.
Search