NewApp Digest
search bot

updates

Bitdefender review: The ultimate antivirus software for all-round protection
Tech Optimizer
May 21, 2026

Bitdefender review: The ultimate antivirus software for all-round protection

Bitdefender is an antivirus software that offers various plans for consumers, families, and businesses, with the Ultimate Security plan being particularly notable. The software features a user-friendly interface, anti-theft and anti-scam capabilities, a VPN, and identity protection services. Pricing for consumer plans starts at .99 for Bitdefender Total Security, .99 for Premium Security, and .99 for Ultimate Security. For small businesses, the Ultimate Small Business Security Plan starts at .99 for three users, scaling up to 9.99 for 25 users. The GravityZone Small Business Security plan costs 9.99 for five devices, with the GravityZone Business Security Plan priced at 9.99. Bitdefender Total Security has received a perfect score of 6/6 from AV Test for Protection, Performance, and Usability, and an AAA rating from SE Labs. The software installation is straightforward, and it performs scans efficiently without impacting system performance. It includes features like Scam Protection Pro, Vulnerability Scan, and identity theft protection, with continuous monitoring of the dark web. Customer support is available 24/7 via email, chat, or phone, and there is a dedicated B2B help center for businesses.
Android 17 gets a smarter media switcher, and it already feels better than the old carousel
AppWizard
May 21, 2026

Android 17 gets a smarter media switcher, and it already feels better than the old carousel

Google's Android 17 QPR1 Beta 3 introduces a new media app switching interface that replaces the traditional carousel layout with a streamlined card layout. This design features compact cards for minimized media applications on either side of the main media player, allowing users to switch between apps by tapping on these cards. Media apps are organized by importance, showing the currently playing media first, followed by content from remote devices and past sessions. While the new layout has received positive feedback for its clarity, some users have raised concerns about the size of the media controls and requested options for customization to enhance accessibility.
Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks
Tech Optimizer
May 21, 2026

Highly Critical Drupal Core Flaw Exposes PostgreSQL Sites to RCE Attacks

Drupal has announced critical security updates for a vulnerability in Drupal Core, identified as CVE-2026-9082, which allows attackers to execute remote code, escalate privileges, or disclose sensitive information. The vulnerability has a CVSS score of 6.5 and affects only sites using PostgreSQL databases. It can be exploited by anonymous users and is rooted in a database abstraction API used for query validation and SQL injection prevention. Updates have been released for the following versions: - Drupal 11.3.10 - Drupal 11.2.12 - Drupal 11.1.10 - Drupal 10.6.9 - Drupal 10.5.10 - Drupal 10.4.10 Drupal 7 is not impacted by this vulnerability. Users on unsupported versions 9 and 8 can access manual patches for: - Drupal 9.5 - Drupal 8.9 Drupal has stated that versions 11.1.x, 11.0.x, and 10.4.x and below are end-of-life and do not receive security coverage, and that both Drupal 8 and 9 have reached end-of-life status. Patches for unsupported versions are provided as a best effort, but users should be aware of potential other vulnerabilities.
PostgreSQL Flaws Expose Databases to Remote Code Execution and SQL Injection
Tech Optimizer
May 21, 2026

PostgreSQL Flaws Expose Databases to Remote Code Execution and SQL Injection

PostgreSQL has released versions 18.4, 17.10, 16.14, 15.18, and 14.23 to address 11 security vulnerabilities and over 60 bugs. The vulnerabilities affect PostgreSQL versions 14 through 18 and include issues such as remote code execution, SQL injection, and denial-of-service risks. Specific vulnerabilities include: - CVE-2026-6472: Missing authorization in CREATE TYPE allows query hijacking. - CVE-2026-6473: Integer wraparound leads to out-of-bounds writes and server crashes. - CVE-2026-6474: Format string issue leaks server memory. - CVE-2026-6475: Symlink attack allows overwriting arbitrary files. - CVE-2026-6476: SQL injection allows execution of arbitrary SQL as superuser. - CVE-2026-6477: Memory buffer overwrite via libpq lo_* functions. - CVE-2026-6478: Timing attack exposes MD5-hashed passwords. - CVE-2026-6479: SSL/GSS recursion flaw allows denial-of-service. - CVE-2026-6575: Buffer over-read leaks memory data (PostgreSQL 18 only). - CVE-2026-6637: Refint module enables stack overflow and SQL injection, leading to possible RCE. - CVE-2026-6638: SQL injection in REFRESH PUBLICATION via table names. Organizations are advised to upgrade to the latest versions, avoid MD5 password authentication, restrict privileges, audit extensions, and monitor for abnormal activity. PostgreSQL 14 will reach its end-of-life on November 12, 2026.
Windows 11's new SecureBoot folder isn't malware. Here's what it does
Winsage
May 21, 2026

Windows 11’s new SecureBoot folder isn’t malware. Here’s what it does

Users have observed a new folder named “SecureBoot” in the Windows system folder following the installation of Windows 11's May update (KB5089549). This update may cause installation issues for some devices and introduces a directory that contains example scripts for IT professionals to manage Secure Boot certificate updates. Windows Secure Boot certificates are set to expire next month, and outdated certificates will lead to loss of support starting in June, potentially compromising Secure Boot functionality. Microsoft is distributing new certificates through Windows Update. The SecureBoot folder does not require individual users to take action, and deleting it is discouraged as it may cause complications with future Windows updates.
PlayStation Will No Longer Bring Narrative Single-Player Games To PC
AppWizard
May 20, 2026

PlayStation Will No Longer Bring Narrative Single-Player Games To PC

PlayStation is shifting its strategy regarding PC releases, with CEO Hermen Hulst announcing that single-player narrative experiences will now be exclusive to PlayStation consoles. This means titles like Ghost of Yotei, Saros, and Marvel’s Wolverine are unlikely to be available on PC. The decision appears to be driven by underwhelming sales figures for PlayStation games on PC and a desire to boost console purchases ahead of the potential PS6 launch. However, multiplayer games, such as MARVEL Tōkon: Fighting Souls, will still be released on PC. The gaming community is hopeful that PlayStation may reconsider its approach in the future, potentially releasing titles through its own launcher or storefront.
Herman Miller has finally made a gaming desk, and it costs less than its $2,000 chair
AppWizard
May 20, 2026

Herman Miller has finally made a gaming desk, and it costs less than its $2,000 chair

Herman Miller has launched the Coyl gaming desk, marking its entry into the gaming desk market. The desk features a distinctive coiled red power cable that powers its electronic sit-stand adjustable-height legs and an integrated multi-socket extension cord. It includes a cable tray with a flip-down fabric cover for easy access, a pegboard/accessory mount section for various holders, and a dedicated headset hook. The height control system uses a large knurled knob instead of conventional buttons. The desk is available in multiple finishes and comes with a 12-year warranty. The starting price is ,475, and it is currently available for purchase in North America.
Microsoft shares mitigation for YellowKey Windows zero-day
Winsage
May 20, 2026

Microsoft shares mitigation for YellowKey Windows zero-day

Microsoft has addressed the YellowKey vulnerability, a zero-day flaw in Windows BitLocker identified as CVE-2026-45585. This vulnerability allows unauthorized access to BitLocker-protected drives through a specific exploitation process involving 'FsTx' files. The flaw was disclosed by an anonymous researcher known as 'Nightmare Eclipse.' Microsoft has released mitigation strategies, including removing the autofstx.exe entry from the Session Manager's BootExecute REGMULTISZ value and reestablishing BitLocker trust for WinRE. Additionally, users are advised to change BitLocker settings from "TPM-only" to "TPM+PIN" mode, requiring a pre-boot PIN for drive decryption, and to enable "Require additional authentication at startup" for unencrypted devices.
Search