NewApp Digest
search bot

user activity

Malwarebytes Review 2026: Safe, But is Free Tier Enough?
Tech Optimizer
August 24, 2026

Malwarebytes Review 2026: Safe, But is Free Tier Enough?

Overall Rating: 4.3/5 ⭐ Protection: 4.3 ⭐ Performance: 3.9 ⭐ Features: 4.4 ⭐ Support: 4.8 ⭐ Value: 4.2 ⭐ Pricing starts at .99 for the first year, verified August 2026. Malwarebytes earned the AV-TEST TOP PRODUCT award in March-April 2026, scoring 17.5 out of 18 points. It successfully removed all infections in remediation tests and had no false detections across 1.5 million legitimate samples at AV-TEST. The software can coexist with other antivirus solutions and offers a free version with limited features. The free version lacks ongoing protection after 14 days, while the paid version provides real-time protection. Malwarebytes has a privacy policy stating it does not sell customer data and collects only necessary identifiers. The company was founded in 2008 and is headquartered in Santa Clara, California, having raised a total of 0 million, including a recent investment from Vector Capital in September 2022. It acquired AzireVPN in November 2024. Malwarebytes offers various plans, including Standard, Plus, and Total, with consistent renewal pricing. The Windows version includes comprehensive features, while the Mac version targets adware and browser hijackers. The Android app provides scanning capabilities and phishing protection, and the iPhone app focuses on scam text filtering. Customer support is efficient, with quick responses.
⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
Winsage
August 17, 2026

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

A suspected advanced persistent threat (APT) group linked to China exploited a newly patched vulnerability in VMware vCenter (CVE-2026-59310), which has a critical CVSS score of 9.8, allowing for arbitrary code execution and the deployment of Babuk-derived ransomware. A recently patched vulnerability in Apple macOS (CVE-2026-65400) has been exploited to deploy a cryptocurrency miner, granting unauthorized root access. The Lazarus Group from North Korea exploited a zero-day vulnerability in Microsoft Windows, targeting defense and aerospace sectors. GeoServer patched a critical SQL injection vulnerability that was actively exploited. A new macOS malware, Amnesia Stealer, targets users through ClickFix attacks, stealing data and allowing real-time access to authenticated sessions. A novel attack technique named GhostSplice can manipulate AI coding assistants. Research revealed a method exploiting Chromium's DevTools Protocol for data theft. Noteworthy CVEs this week include CVE-2026-68820, CVE-2026-58231, and multiple others across various platforms. A high-severity command injection flaw in FileRun allows remote code execution. An advanced ClickFix attack has been reported, deploying sophisticated malware. A heap overflow vulnerability in Citrix NetScaler was patched after indications of exploitation. A new malware loader targeting Portuguese-speaking users has been identified. A significant reduction in exposed Automatic Tank Gauge systems has been observed. A phishing campaign targeting Brazil has been detected, and an F.B.I. agent faces charges for unauthorized crypto withdrawals. Authorities in Ukraine dismantled fraudulent call centers, and a North Carolina man was sentenced for cyber extortion. Unauthorized access to sensitive data by the ExfilSquad group has been confirmed. LightSpy activity linked to China has been detected in over 13 countries. A supply chain attack exposed over 2,500 companies, and an Azure exfiltration campaign has exposed millions of enterprise records.
Microsoft is testing deeper Phone Link integration in Windows 11, but do you actually use it?
Winsage
August 3, 2026

Microsoft is testing deeper Phone Link integration in Windows 11, but do you actually use it?

Windows Insiders can access new features in Windows 11 Insider Build 26300.9032, available through the Experimental Preview Channel. Key updates include: - Windows Search: Introduces customizable options for integrating personal or work/school Microsoft accounts and OneDrive in search results. It can automatically expand indexing based on user activity, which can be managed in Settings > Privacy & security > Search. - Phone Link: Users can now preview recent messages or notifications by hovering over them in the Start menu, enhancing visibility into mobile activity. This feature is gradually rolling out and requires a minimum Phone Link build of 1.26021.3.0. - Settings App: Improved search functionality for quicker navigation to relevant settings. - Adaptive Hibernate Policy: Enhancements for instant-on resumes from Modern Standby and better battery preservation based on battery levels. - Start Menu: A fix for an issue causing crashes when dragging apps. - Taskbar: Resolved an issue where hovering over app window previews in an overflow state dismissed them. - File Explorer: Home now retains the state of sections, and improvements have been made for reliability when dragging files to disconnected network drives. Issues with files on DFS mapped drives being misidentified have also been addressed. - Windows Spotlight: Changes to enhance reliability on the lock screen. - Storage: Fixes for File History automatic backups to network shares that displayed false "invalid credentials" errors.
Windows 11 Search is fixing its biggest annoyance, will find files in folders you actually use
Winsage
August 2, 2026

Windows 11 Search is fixing its biggest annoyance, will find files in folders you actually use

Windows 11 Search is a crucial tool for users who create and download files, but it often struggles to find recently accessed files due to its indexing limitations. Microsoft is introducing a feature called “Automatically find additional relevant locations,” which will automatically identify and index folders based on user activity, reducing the need for manual indexing. Currently, Windows Search maintains an index focused on specific folders, which can lead to frustrations when files are not found. Users can manually add locations or switch to Enhanced mode for broader indexing, though this may result in irrelevant search results and increased resource usage. The new feature aims to streamline the search process by making significant folders searchable automatically while allowing users to block any unwanted folders. Additionally, Microsoft is enhancing Windows Search to better recognize typos and plans to disable Bing search and ads in results. These updates are expected to be rolled out later this year.
GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware
Tech Optimizer
July 10, 2026

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

Microsoft Threat Intelligence has identified the GigaWiper malware, which has been detected in compromised environments since October 2025. This malware has destructive capabilities and comes in two forms: standalone wiper binaries and larger binaries with backdoor functionalities, both developed in Golang. The standalone wiper operates at the physical disk level, overwriting disk content and removing partition references. The backdoor variant includes the same wiper functionality and adds persistence through a registry key and scheduled tasks, along with command and control communication via RabbitMQ and Redis. GigaWiper can execute various commands, including wiping drives, triggering a Blue Screen of Death (BSOD), file encryption that mimics ransomware behavior, and managing system elements. The malware integrates components from multiple malware families, including wipers and ransomware mechanisms, and has been linked to a previous malware known as FlockWiper. To defend against GigaWiper, organizations are advised to implement security measures such as tamper protection, blocking access to known C2 infrastructure, and utilizing endpoint detection and response solutions. Microsoft Defender provides detections for GigaWiper and related malware, and threat intelligence reports are available for customers to stay informed about threats. Indicators of compromise include specific SHA-256 hashes and IP addresses associated with GigaWiper.
Windows Server 2025 Adds DNS Over HTTPS for Secure DNS Traffic
Winsage
June 13, 2026

Windows Server 2025 Adds DNS Over HTTPS for Secure DNS Traffic

Microsoft has rolled out support for DNS over HTTPS (DoH) in Windows DNS Server as part of the Windows Server 2025 update. This feature enhances the security of DNS communications through encryption and server authentication, allowing encrypted client-to-resolver traffic in on-premises DNS environments. DoH encrypts DNS queries and responses using HTTPS, protecting sensitive information from interception or alteration. It also uses digital certificates for DNS server authentication to reduce spoofing and impersonation risks. The feature is compatible with existing Windows DNS Server configurations and supports both encrypted and traditional DNS. DoH support is available on Windows Server 2025 with the June 9, 2026 update or newer. Administrators must configure a trusted TLS certificate and enable DoH in the DNS Server service to deploy this feature. Microsoft plans to extend encryption capabilities to include communication between the Windows DNS Server and upstream DNS resolvers in the future.
Here's a closer look at Pixel 10's Magic Cue working in third-party apps
AppWizard
June 8, 2026

Here’s a closer look at Pixel 10’s Magic Cue working in third-party apps

The Pixel 10-exclusive Magic Cue feature is set to expand beyond Google applications, with potential integration into third-party apps like Snapchat and Mozilla Firefox. Developer Kieron Quinn demonstrated Magic Cue's functionality within Firefox, showcasing its ability to provide timely suggestions based on user activity, such as reopening previously closed tabs. The feature uses artificial intelligence to enhance user experience while ensuring privacy by processing data locally on the device. Magic Cue operates using the Gemini Nano model, distinguishing it from other features that may utilize Gemini for cloud-based processing.
What Is OneLaunch.exe? Pros, Cons, and How to Remove It
Tech Optimizer
June 8, 2026

What Is OneLaunch.exe? Pros, Cons, and How to Remove It

OneLaunch is a software application that creates a personalized dock and desktop environment on Windows computers, often pre-installed or bundled with other software. It has received mixed reviews, with concerns about system slowdowns and its legitimacy. OneLaunch.exe is a background process supporting the OneLaunch application, which provides quick access to applications and updates but can consume system resources. The OneLaunch browser, installed alongside the main application, can alter browser settings and redirect searches, potentially leading to unwanted advertisements. While OneLaunch is not classified as traditional malware, it is often categorized as a Potentially Unwanted Program (PUP) due to its bundled installation and ability to modify system settings. It can monitor browsing habits and share data with third-party advertisers. Users report intrusive behavior, such as altering default browser settings, and it can negatively impact system performance. To remove OneLaunch, users should end the running process, uninstall the application, delete leftover folders, remove startup entries, and reset browser settings. OneLaunch may reappear due to accidental reinstallations, active browser extensions, lingering scheduled tasks, or hidden companion programs. Preventative measures include downloading from official sources, reading installation screens carefully, keeping systems updated, and performing regular system checks.
Search