NewApp Digest
search bot

Users

Выпуск qBittorrent 5.2.0
TrendTechie
May 5, 2026

Выпуск qBittorrent 5.2.0

qBittorrent 5.2.0 was released on May 3, 2026, as an open-source torrent client developed with the Qt toolkit. It is available for Linux, Windows, and macOS, and its source code is on GitHub under the GPLv2+ license. The project started with version 4.0 in November 2017, followed by versions 5.0 in September 2024 and 5.1 in April 2025. Key features include an integrated search engine, RSS feed subscription, remote management, and advanced torrent settings. Version 5.2.0 includes enhancements such as an advanced tracker status filter, removal of subcategory restrictions, asynchronous block calculations, reduced resume times for paused downloads, configurable RSS feed refresh times, SOCKS4/SOCKS4a proxy support for the search engine, and various improvements to the web interface and user customization options. Support for builds with Qt 6.5 has been discontinued.
AI finds 20-year-old bugs in PostgreSQL and MariaDB
Tech Optimizer
May 5, 2026

AI finds 20-year-old bugs in PostgreSQL and MariaDB

Patches have been released for all identified vulnerabilities in PostgreSQL and MariaDB, with strong recommendations for users to upgrade to the latest fixed versions. A zero-day flaw in PostgreSQL, classified as CVE-2026-2005, is a heap-based buffer overflow issue in the "pgcrypto" extension. This vulnerability allows attackers to exploit specially crafted input, leading to out-of-bounds writes and potential remote code execution on the database server. It affects all supported versions of PostgreSQL and has been addressed in updates v18.2, v17.8, v16.12, v15.16, and v14.21. The flaw has a high-severity rating of CVSS 8.8 out of 10 and has existed since 2005.
ScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and Windows
BetaBeacon
May 5, 2026

ScarCruft Hacks Gaming Platform to Deploy BirdCall Malware on Android and Windows

ScarCruft compromised a video game platform in a supply chain attack, trojanizing its components with a backdoor called BirdCall to target ethnic Koreans residing in China. The attack enabled the threat actors to target both Windows and Android devices, turning it into a multi-platform threat. The campaign targeted sqgame[.]net, a gaming platform used by ethnic Koreans in China, known as a transit point for North Korean defectors. BirdCall has features like screenshot capture, keystroke logging, and data gathering, and relies on legitimate cloud services for command-and-control. The Android variant collects various data and has seen active development.
Microsoft is finally ditching the junk MSN feed in Windows widgets
Winsage
May 5, 2026

Microsoft is finally ditching the junk MSN feed in Windows widgets

Microsoft will eliminate the MSN news feed from the widgets panel in Windows 11, shifting to a "quiet by default" experience. This change includes disabling the automatic opening of the widgets panel when hovering over its taskbar icon and turning off distracting taskbar badges by default. Users will now see a more personalized set of information in the widgets panel instead of notifications related to stocks, weather, or news. These updates aim to create a less distracting interface and improve the overall user experience in Windows 11, with further enhancements expected throughout 2026.
Meta enhances security of WhatsApp and Messenger encrypted backups
AppWizard
May 5, 2026

Meta enhances security of WhatsApp and Messenger encrypted backups

Meta has enhanced the security and transparency of its end-to-end encrypted backup system for WhatsApp and Messenger. The improvements focus on refining the distribution and verification of encryption keys, and allow for independent audits of certain infrastructure components. The updates are based on Meta's Hardware Security Module (HSM)-based Backup Key Vault architecture, which securely stores recovery secrets in tamper-resistant hardware, ensuring that neither Meta nor cloud service providers can access users' message archives. For encrypted backups, users' devices generate a 256-bit encryption key locally, which encrypts all backup data before uploading it to cloud storage. The key remains on the device in an encrypted format, with the user's password not visible to Meta or third parties. An encrypted version of the backup key is stored in the HSM-based vault using the OPAQUE password-authenticated key exchange protocol, enhancing recovery security without revealing the password. The recent updates include an over-the-air (OTA) fleet key distribution mechanism, which avoids hardcoding trusted infrastructure keys into Messenger applications. Clients receive a “validation bundle” containing the HSM fleet's public keys during runtime, with signatures verified against Cloudflare’s Key Transparency system. The vault operates across at least seven data centers using majority-consensus replication to ensure availability and integrity. Meta plans to publish cryptographic proof of each new HSM fleet deployment, allowing advanced users and researchers to verify these deployments through the open-source “mbt” (Meta Binary Transparency) CLI tool, which conducts multiple checks to confirm that fleet keys are untampered.
Lidl shoppers get 100 free points in new app update
AppWizard
May 5, 2026

Lidl shoppers get 100 free points in new app update

Lidl has launched Lidl Plus Points, a rewards system in the Lidl Plus app, allowing shoppers to earn points with every grocery purchase. New and existing app users receive 100 complimentary points that can be redeemed for select rewards. The points can be exchanged for money-off coupons, free or discounted products, and rewards on various items. From May 5 to May 22, customers earn double points on fruit purchases. Lidl has partnered with Liberty X for a marketing campaign to promote the new program.
FEMITBOT Network Abuses Telegram Mini Apps for Crypto Scams and Android Malware
AppWizard
May 5, 2026

FEMITBOT Network Abuses Telegram Mini Apps for Crypto Scams and Android Malware

A fraud network called FEMITBOT has emerged, using Telegram's Mini App feature to conduct investment scams and distribute malware. Identified by the research firm CTM360, the network operates through API responses and presents itself as organized. The scams involve Telegram Mini Apps that display phishing pages, fake dashboards showing fictitious earnings, and urgency tactics to pressure users into making quick decisions. FEMITBOT mimics well-known brands like Apple and Coca-Cola to enhance credibility and disseminates Android malware disguised as legitimate applications. The operation is highly organized, utilizing marketing tools to optimize their scams. Users are warned to be cautious of bots requesting deposits before granting access to funds.
Steam Controller stock sold out in minutes, but there is something you can do about it
AppWizard
May 5, 2026

Steam Controller stock sold out in minutes, but there is something you can do about it

Steam Controller stock sold out quickly after its release, with most regions reporting "out of stock" within half an hour. Scalpers are reselling the controllers on eBay at inflated prices, often using misleading listings that violate eBay's presale guidelines. Consumers can report these listings to eBay, which may lead to their removal. It is advised that buyers resist purchasing from scalpers and wait for standard-priced stock, as more shipments may be forthcoming and could resolve existing software issues with the controller.
Search