NewApp Digest
search bot

vulnerability

What Is End Point Security And How Does It Work?
Tech Optimizer
September 26, 2026

What Is End Point Security And How Does It Work?

Endpoint security is a suite of technologies and processes designed to protect devices connected to a business network from cyber threats. It includes various devices such as laptops, smartphones, tablets, servers, and IoT devices. Endpoint security employs a multi-layered approach, scanning for malware, regulating applications, and monitoring device activity for unusual behavior. It is distinct from antivirus software, encompassing a broader range of protective measures, including firewalls, encryption, application controls, patch management, and Endpoint Detection and Response (EDR). The rise of remote work and the increasing number of devices create a larger attack surface, making endpoint security essential for preventing breaches and safeguarding business operations.
If you can't tell what's real or AI-generated anymore, this Android app is here to help
AppWizard
September 25, 2026

If you can’t tell what’s real or AI-generated anymore, this Android app is here to help

Generative AI is becoming a crucial part of various services and applications, leading to a series that will highlight notable AI innovations. A challenge for users is distinguishing between authentic and AI-generated content, which has become increasingly difficult. The C2PA Verify app helps users identify image origins by reading C2PA credentials, although these credentials can be erased, limiting the app's effectiveness. C2PA Verify is open-source, free, and developed by Dark Rock Studios. Other noteworthy AI applications include: - Retirement Planner: A web app powered by Claude Opus 4.5 that assists users in financial planning for retirement by calculating future portfolio value, drawdown rates, and tax implications, tailored for US and Canadian citizens. - Memoria: An Android gallery app that uses offline AI for natural language search, ensuring user privacy by keeping data on the device. It utilizes Apple’s MobileCLIP-S0 model for processing queries and is open-source and free to use.
Decades-old file security flaws found in Android, Linux, macOS, and Windows
Winsage
September 24, 2026

Decades-old file security flaws found in Android, Linux, macOS, and Windows

Security researchers from Graz University of Technology in Austria have discovered significant vulnerabilities in the file notification systems of major operating systems: Android, Linux, macOS, and Windows. These flaws have existed for decades and can lead to the leakage of sensitive system information. The affected systems include inotify on Linux (since 2005), FileObserver on Android (since 2008), ReadDirectoryChangesW on Windows (since 2000), and FSEvents on macOS (since 2007). The vulnerabilities allow unprivileged users to monitor file events without explicit read permissions, enabling potential attacks such as inter-keystroke timing attacks and website fingerprinting. For example, on Linux, monitoring a readable directory can leak events on files that cannot be read, allowing attackers to achieve a 93.1% to 100% accuracy rate in monitoring keystrokes. Specific vulnerabilities include CVE-2025-68788 on Linux, which received a partial fix in December 2025, and issues on Android where FileObserver can bypass app storage isolation. On macOS, limited information is available due to a lack of bypasses for private directories, while on Windows, monitoring the root directory can reveal the full path of every accessed file, allowing real-time tracking of web activity with a 97.8% accuracy rate. Microsoft has described the issue as "by-design," which has faced criticism. The researchers propose stronger mitigations, such as disallowing monitoring of entire drives on Windows and introducing a permission system for file monitoring on Windows and macOS. Their findings will be presented at the ACM CCS 2026 conference in November in The Hague, Netherlands.
Dolphin Emulator on Android finally lets you drag your friends into online Gamecube and Wii games
BetaBeacon
September 24, 2026

Dolphin Emulator on Android finally lets you drag your friends into online Gamecube and Wii games

Dolphin Emulator has added NetPlay support to Android devices, allowing users to play online multiplayer with GameCube and Wii titles across different platforms. The update uses a lockstep method to sync gameplay and runs on a single CPU core for consistency. The team is working on collaborative play through Wi-Fi Direct and addressing security concerns by moving to GitHub's vulnerability reporting mechanism.
Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware
Winsage
September 24, 2026

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

A Chinese threat actor, codenamed UTA0565, has exploited newly disclosed vulnerabilities in Google Chrome (CVE-2026-85046, CVE-2026-87491) and Windows (CVE-2026-85880) through deceptive websites, achieving remote code execution. The attacks were detected on September 3 and 4, 2026, and involved impersonating organizations to mislead victims, particularly targeting Asian government entities with phishing emails related to Hong Kong activist Chow Hang-tung. The phishing messages directed users to fraudulent sites that loaded an HTML element using the BlueMoon exploit kit, which delivered a payload named "chrome_cleanup.exe," associated with the CLEANGULP malware family. This malware allows for command execution, process listing, file uploads and downloads, and uses a hard-coded domain for command-and-control communications. The exploit's widespread use suggests a coordinated effort within the Chinese cyber espionage community, with indications that multiple groups are sharing and weaponizing the exploit.
silver Android smartphone
Tech Optimizer
September 23, 2026

BigDiskBuster PoC Blocks Windows Defender Updates

A new tool named BigDiskBuster has been released on GitHub, which disrupts Microsoft Defender Antivirus by preventing it from installing updates. It does this by consuming available disk space during the update process, causing Defender to remain on its current version and unable to receive new platform or signature updates. BigDiskBuster operates as a local denial-of-service technique and requires prior access to the target machine to execute. The tool was created by researcher Abdelhamid Naceri, known as Nightmare Eclipse, who has previously worked on similar projects. As of now, there is no CVE identifier, patch, or advisory from Microsoft regarding this issue.
New Windows Defender zero-day blocks Microsoft antivirus updates
Winsage
September 23, 2026

New Windows Defender zero-day blocks Microsoft antivirus updates

Security researcher Abdelhamid Naceri, known as Nightmare Eclipse, released a zero-day exploit called BigDiskBuster that targets Microsoft Defender, preventing antivirus updates and leaving systems vulnerable. BigDiskBuster operates across all supported Windows versions and must run in the background to block updates. Naceri has previously released a similar exploit called UnDefend and has a history of releasing multiple zero-day exploits since April 2026 amid a dispute with Microsoft. Two weeks before BigDiskBuster, he introduced another exploit named ShieldCrash, which grants SYSTEM access and circumvents a patched flaw. Naceri's recent exploits include tools like LegacyHive, BlueHammer, RedSun, YellowKey, GreenPlasma, and MiniPlasma, all targeting Microsoft Defender and other Windows components. Microsoft has warned of potential legal action against malicious activities but has not commented on BigDiskBuster.
Microsoft is set to revamp the design of outdated dialogue boxes in Windows 11
Winsage
September 22, 2026

Microsoft is set to revamp the design of outdated dialogue boxes in Windows 11

Microsoft is modernizing the user experience in Windows 11 by redesigning all legacy dialog boxes in response to user feedback. March Rogers, Microsoft's design director, is leading this initiative to ensure consistency across the platform. Specific examples of outdated interfaces include the Speech settings dialog and the Windows recovery menu. Microsoft is using two strategies for updates: incremental updates, which introduce a dark theme across system dialogs, and comprehensive redesigns using the WinUI 3 framework. The Run menu has been completely revamped with a dark theme and improved features, while the previous version remains available for user preference. These updates are currently in test builds of Windows 11. Additionally, Microsoft is rolling out security patches and an emergency patch for issues from the September update.
Search