user awareness Archives

AppWizard

August 21, 2026

New Android Malware Spotted Infecting Cars Via Software Updates

A new strain of Android malware has emerged, targeting automotive head units responsible for infotainment, connectivity, and navigation in vehicles. Discovered by Kaspersky in June, this is the first documented instance of malware affecting car head units, specifically within the firmware updaters of Android-based software developed by DoFun, a Hong Kong company. The malware, disguised as an application called JarService, infiltrates devices without user awareness. It is delivered through a legitimate system application called TWCore, which collects analytics and updates software. The malware aims to convert the head unit into a botnet, equipped with commands to download and execute code and display advertisements, potentially for online ad fraud. Kaspersky notified DoFun, which addressed the vulnerabilities, and noted similarities between this malware and a previous threat called BadBox, which affected various Android devices.

AppWizard

August 17, 2026

First Pixel and Samsung, now another brand could get Google’s Scam Detection

Recent findings indicate that Google’s Scam Detection feature may soon be available on vivo smartphones, making vivo the third Android manufacturer to adopt this technology, following Google and Samsung. The feature, which uses on-device AI to identify potential scams during phone calls, has recently been introduced on the Samsung Galaxy S26 series. A teardown of the Phone by Google app revealed internal references to the codename “Sharpie,” linked to Scam Detection, suggesting its upcoming availability on vivo devices. While it is unclear which vivo models will support this feature, speculation points to the vivo X500 series as the likely first recipient, with the X300 series possibly following. It remains uncertain whether vivo will integrate Scam Detection into its own dialer app or use the Phone by Google app. The technology enhances user awareness by monitoring for suspicious patterns during calls, such as requests for payment via gift cards, and provides alerts for potential scams, excluding calls from saved contacts. The anticipated expansion of Scam Detection to vivo reflects a growing trend among Android manufacturers to enhance user safety against scams.

Winsage

August 16, 2026

LeakWatch CW 33/2026: Windows Zero-Day, AMD, Intel and Malware

- The August Patch Tuesday release included 421 vulnerabilities, with 236 affecting Windows, highlighting CVE-2026-68820, a critical use-after-free vulnerability that allows privilege escalation to SYSTEM level without user interaction. - CISA added CVE-2026-68820 to its Known Exploited Vulnerabilities Catalog, confirming its active exploitation. - AMD's Ryzen Master software has vulnerabilities, including CVE-2025-54512 (DLL hijacking) and CVE-2026-0465 (use-after-free), which could allow code execution with elevated privileges. - AMD's advisory on CVE-2026-6726 and CVE-2026-6727 indicates vulnerabilities in the TPM 2.0 reference code affecting Ryzen platforms, leading to potential information disclosure. - Intel's advisories included updates for microcode, Wi-Fi software, and NPU drivers, with CVE-2026-20760 addressing privilege escalation risks. - Google’s Chrome update on August 11 fixed five high-severity vulnerabilities, including use-after-free flaws. - Gunra malware has evolved into a ransomware-as-a-service model using a double-extortion strategy. - WindRelay malware combines SpyNote RAT with an NFC relay component, allowing attackers to relay NFC communication between a victim's bank card and a remote device. - The findings emphasize the need to view vulnerabilities as part of potential attack chains, highlighting the complexity of modern cybersecurity threats.

AppWizard

August 9, 2026

Android apps could be leaking your precise location

Third-party advertising tools embedded in Android applications are automatically collecting location data, often without the app developers' awareness. Software development kits (SDKs) used for advertising come with location data collection enabled by default, unless developers actively disable this feature. Historical location data has been sold to military and intelligence agencies, including the FBI, and used in immigration enforcement actions in the US. The Electronic Frontier Foundation (EFF) reported that app-level location permissions do not provide meaningful consent for location collection by third-party advertising SDKs. The EFF identified four advertising SDKs—InMobi, BidMachine, Verve's HyBid, and Huawei's Petal Ads—that collect and share location data by default. Two analyzed apps had been downloaded 60 million times without providing a privacy notice or seeking user consent for third-party location sharing. Users can manage location permissions through their device settings, but the EFF emphasizes that developers should ensure user data is not shared by default.

AppWizard

August 6, 2026

Your favorite Android apps might be leaking your location

A report from the Electronic Frontier Foundation (EFF) highlights concerns about third-party software development kits (SDKs) in mobile applications collecting and sharing user location data with advertising companies, often without user consent. Many developers use these advertising SDKs for monetization, but their default settings allow for location data collection. This data is sent to advertising companies and location data brokers, which can misuse it in sensitive contexts. Users may unknowingly expose their location data when granting permissions to apps, as third-party SDKs can access this information without clear user awareness. The EFF identified several advertising SDKs, including InMobi, BidMachine, Verve’s HyBid, and Huawei’s Petal Ads, that collect and share location data by default. Developers are encouraged to review SDK settings to protect user privacy, and the EFF calls for regulatory scrutiny of data harvesting practices.

AppWizard

August 4, 2026

Android app developers may be unwittingly sharing their users’ location data with advertisers

Mobile apps often require precise location data for functionality, but there are concerns about the unintentional sharing of this sensitive information with third parties, such as advertisers and data brokers. The Electronic Frontier Foundation (EFF) found that third-party code in apps may collect location data without users' explicit consent due to default settings in software development kits (SDKs). Unless developers disable this feature, SDKs inherit app permissions, leading to the collection of users' location data. This raises privacy issues, as users' location histories can be sold to data brokers and potentially accessed by military and intelligence agencies. The EFF identified that certain Android apps, downloaded over 60 million times, were sharing location data without user awareness. Currently, there are no SDK-specific location permissions, meaning that consent to share location data with an app also extends to advertisers. The EFF calls for a change in industry standards to prevent default data sharing by advertising SDKs.

Tech Optimizer

July 6, 2026

Why Antivirus Alone No Longer Protects Small Businesses

Many small businesses have historically relied on antivirus software for computer security, which was effective against identifiable malware. However, the current cyber threat landscape includes sophisticated attacks such as phishing, credential theft, and ransomware that traditional antivirus solutions may not adequately address. Factors driving increased cyber threats in Kenya include phishing, weak authentication practices, delayed software updates, and the use of artificial intelligence by malicious actors. While antivirus software can detect known malware and block common threats, it falls short against tactics like stolen credentials and social engineering. The Communications Authority recommends complementing antivirus with multi-factor authentication, regular software updates, secure configurations, and user training. Endpoint Detection and Response (EDR) solutions enhance visibility into attacks by monitoring endpoint activity for suspicious behaviors, allowing for prompt investigation and response. A layered security strategy that integrates multiple protective measures is essential for effective cybersecurity, and many modern security platforms offer unified solutions to simplify management for smaller organizations. The Kaspersky SMB Cybersecurity Guide provides insights into modern attack methods and the role of endpoint protection in improving a business's cybersecurity posture.

AppWizard

June 19, 2026

I Tried Android 17’s ‘Bubbles’ and It Makes Multitasking Way Easier?

Android 17 introduces a feature called Bubbles for Pixel phones, enhancing user experience by allowing users to create floating shortcuts for frequently used applications. Bubbles can be positioned anywhere on standard smartphones and docked in the bottom right corner on foldable devices, acting as a mini launcher for quick access to apps without interrupting ongoing tasks. Users can create a bubble by long-pressing the app icon and selecting Bubble. Bubbles can be repositioned and removed easily, but not all apps support this feature. When a bubble is selected, the app appears in a smaller overlay window, allowing interaction without disrupting the current workflow. This feature improves multitasking efficiency by reducing the number of swipes and taps needed to access applications.

Winsage

June 7, 2026

Windows 11’s June 2026 Update Lands June 9 With Shared Audio And NPU Monitoring: The 6 Features Worth Knowing

Microsoft will begin rolling out the June 2026 update for Windows 11 on June 9, 2026. Key features include Shared Audio, which allows two users to listen to the same audio output from one device using a new Low Latency audio profile, and NPU monitoring in Task Manager, enabling users to track AI processing handled by the neural processing unit. The update also introduces multi-app camera streaming, custom account folder naming during setup, and various enhancements to Settings, Windows Hello, USB functionality, battery management, and personalization options.

AppWizard

May 27, 2026

‘No Future Updates’—Google Will Confirm Play Store App Deletion

Google is enhancing the security of its Play Store by removing high-risk and low-quality applications and will soon notify users when an app has been deleted from the Play Store. This notification will inform users that the app will no longer receive updates, which is crucial for security as unpatched apps can be exploited. Currently, users only receive alerts about significant security threats, but the new feature aims to improve user awareness regarding app removals. The change comes amid rising cyber threats, with a recent report indicating that vulnerability exploitation is a major risk. Previously, users were not notified about app removals, leaving them unaware unless they found out through other means.