NewApp Digest
search bot

Users

Microsoft is finally ditching the junk MSN feed in Windows widgets
Winsage
May 5, 2026

Microsoft is finally ditching the junk MSN feed in Windows widgets

Microsoft will eliminate the MSN news feed from the widgets panel in Windows 11, shifting to a "quiet by default" experience. This change includes disabling the automatic opening of the widgets panel when hovering over its taskbar icon and turning off distracting taskbar badges by default. Users will now see a more personalized set of information in the widgets panel instead of notifications related to stocks, weather, or news. These updates aim to create a less distracting interface and improve the overall user experience in Windows 11, with further enhancements expected throughout 2026.
Meta enhances security of WhatsApp and Messenger encrypted backups
AppWizard
May 5, 2026

Meta enhances security of WhatsApp and Messenger encrypted backups

Meta has enhanced the security and transparency of its end-to-end encrypted backup system for WhatsApp and Messenger. The improvements focus on refining the distribution and verification of encryption keys, and allow for independent audits of certain infrastructure components. The updates are based on Meta's Hardware Security Module (HSM)-based Backup Key Vault architecture, which securely stores recovery secrets in tamper-resistant hardware, ensuring that neither Meta nor cloud service providers can access users' message archives. For encrypted backups, users' devices generate a 256-bit encryption key locally, which encrypts all backup data before uploading it to cloud storage. The key remains on the device in an encrypted format, with the user's password not visible to Meta or third parties. An encrypted version of the backup key is stored in the HSM-based vault using the OPAQUE password-authenticated key exchange protocol, enhancing recovery security without revealing the password. The recent updates include an over-the-air (OTA) fleet key distribution mechanism, which avoids hardcoding trusted infrastructure keys into Messenger applications. Clients receive a “validation bundle” containing the HSM fleet's public keys during runtime, with signatures verified against Cloudflare’s Key Transparency system. The vault operates across at least seven data centers using majority-consensus replication to ensure availability and integrity. Meta plans to publish cryptographic proof of each new HSM fleet deployment, allowing advanced users and researchers to verify these deployments through the open-source “mbt” (Meta Binary Transparency) CLI tool, which conducts multiple checks to confirm that fleet keys are untampered.
Lidl shoppers get 100 free points in new app update
AppWizard
May 5, 2026

Lidl shoppers get 100 free points in new app update

Lidl has launched Lidl Plus Points, a rewards system in the Lidl Plus app, allowing shoppers to earn points with every grocery purchase. New and existing app users receive 100 complimentary points that can be redeemed for select rewards. The points can be exchanged for money-off coupons, free or discounted products, and rewards on various items. From May 5 to May 22, customers earn double points on fruit purchases. Lidl has partnered with Liberty X for a marketing campaign to promote the new program.
FEMITBOT Network Abuses Telegram Mini Apps for Crypto Scams and Android Malware
AppWizard
May 5, 2026

FEMITBOT Network Abuses Telegram Mini Apps for Crypto Scams and Android Malware

A fraud network called FEMITBOT has emerged, using Telegram's Mini App feature to conduct investment scams and distribute malware. Identified by the research firm CTM360, the network operates through API responses and presents itself as organized. The scams involve Telegram Mini Apps that display phishing pages, fake dashboards showing fictitious earnings, and urgency tactics to pressure users into making quick decisions. FEMITBOT mimics well-known brands like Apple and Coca-Cola to enhance credibility and disseminates Android malware disguised as legitimate applications. The operation is highly organized, utilizing marketing tools to optimize their scams. Users are warned to be cautious of bots requesting deposits before granting access to funds.
Steam Controller stock sold out in minutes, but there is something you can do about it
AppWizard
May 5, 2026

Steam Controller stock sold out in minutes, but there is something you can do about it

Steam Controller stock sold out quickly after its release, with most regions reporting "out of stock" within half an hour. Scalpers are reselling the controllers on eBay at inflated prices, often using misleading listings that violate eBay's presale guidelines. Consumers can report these listings to eBay, which may lead to their removal. It is advised that buyers resist purchasing from scalpers and wait for standard-priced stock, as more shipments may be forthcoming and could resolve existing software issues with the controller.
ScarCruft hackers push BirdCall Android malware via game platform
BetaBeacon
May 5, 2026

ScarCruft hackers push BirdCall Android malware via game platform

APT37, also known as ScarCruft and Ricochet Chollima, has developed an Android version of the backdoor BirdCall, which serves as spyware in addition to a backdoor. The malware was delivered through a Chinese website that hosts games for Android, iOS, and Windows, targeting only Android and Windows systems. The Android variant of BirdCall has capabilities such as extracting IP geolocation information, collecting contact lists, call logs, SMS data, device information, taking screenshots, recording audio, and exfiltrating files. Users are advised to download software only from official marketplaces and trusted publisher sites to protect against malware infections.
The best mobile antivirus software of 2026: Expert tested and reviewed
Tech Optimizer
May 5, 2026

The best mobile antivirus software of 2026: Expert tested and reviewed

Bitdefender Mobile Security is currently regarded as the best mobile antivirus software, achieving a 100% detection rate for malware on Android devices according to AV-TEST's August 2025 report. The 2026 version introduces App Anomaly Detection and includes features like Scam Alert and anti-theft tools. Sophos Intercept X for Mobile offers a free version with a perfect score in AV-TEST's comparisons and features such as multi-factor authentication and a Privacy Advisor. Surfshark Antivirus, part of the Surfshark One package, scored six out of six in AV-TEST's evaluations and includes various security tools, but is only available for Android, macOS, and Windows. Avast Mobile Security is a popular free option with robust features and achieved perfect scores in protection and usability in AV-TEST's September-October 2025 report. AVG Antivirus, operating on the same engine as Avast, also detected 100% of malware in AV-TEST's March-April 2025 evaluations and includes anti-theft tools.
Xbox Releases A Game-Changing Update For PC
AppWizard
May 5, 2026

Xbox Releases A Game-Changing Update For PC

Microsoft has begun the phased rollout of Xbox Mode for Windows 11 PCs, enhancing the gaming experience. Xbox Mode provides a full-screen user interface optimized for controller use, displaying only one application at a time to minimize distractions. Players can switch between Xbox Mode and the traditional Windows 11 desktop and Xbox Game Pass subscribers can navigate their game libraries easily. Xbox Mode was initially available for testing in late 2025 and officially started its public rollout on April 30, with deployment occurring in waves across various regions.
Defender yanks root certs as Windows updates blocks backups
Winsage
May 5, 2026

Defender yanks root certs as Windows updates blocks backups

Microsoft's Defender anti-malware tool update version 1.449.425.0 removed two DigiCert root digital certificates, leading to false positives that flagged them as severe malware (Trojan:Win32/Cerdigent.A!dha). This incident was later identified as a false positive, and updating to version 1.449.430.0 or later reinstates the certificates. The issue may be linked to a DigiCert employee encountering disguised malware. Additionally, Windows updates from April 14 caused third-party backup applications to malfunction due to the addition of vulnerable psmounterex.sys kernel driver versions to a blocklist. Users experienced difficulties with mounting backup image files, and Microsoft referenced a vulnerability rated 9.3 out of 10 in the driver. Other affected software includes Acronis Cyber Protect Cloud and UrBackup server. Microsoft has not explained the delay in adding the vulnerable driver to the blocklist, and other recent update-related issues have also been reported.
Search