websites Archives

Winsage

September 30, 2026

Windows 11 setup now prompts you to install TikTok and Netflix apps during first boot

Microsoft has introduced a new feature called Assisted Setup in Windows 11, which allows users to install popular third-party applications like TikTok, WhatsApp, and Spotify immediately after the out-of-box experience (OOBE). This feature is gradually rolling out with build 26340.9354, released on September 8. Users can opt for automatic downloads and installations of these applications, but they must explicitly consent to download them, unlike pre-installed apps like OneDrive and Phone Link. The setup process also allows users to pin popular websites to the taskbar, with recommendations based on geographical location. Windows 11 26H2 has been officially released.

AppWizard

September 29, 2026

How we found 24 Android vulnerabilities using our open source AI security agent

The GitHub Security Lab has introduced the Taskflow Agent, an open-source tool that uses artificial intelligence to automate the identification of vulnerabilities in Android applications. This tool allows security researchers to create custom taskflow prompts, leading to the discovery of over 20 vulnerabilities. To use the taskflows, a GitHub Copilot license is required, and users can run scripts to audit their projects, with results displayed in an SQLite viewer. Two specific vulnerabilities identified include: 1. OsmAnd app allows malicious applications to track user locations due to improper handling of intent extras in its exported activity. 2. The Wikipedia app has a logic flaw that enables attackers to redirect users to malicious sites via a deeplink mechanism, potentially leading to account takeovers. The GitHub Security Lab has reported a total of 24 vulnerabilities in Android applications, highlighting the effectiveness of AI in security research.

Winsage

September 27, 2026

‘Decades-old’ bugs found affecting Windows, Android, macOS and Linux — but the OS makers don’t see it as a big deal

Researchers at Graz University of Technology discovered significant vulnerabilities in the file-notification subsystems of major operating systems: Linux, Windows, macOS, and Android. These flaws, present for decades, allow side-channel attacks that can infer sensitive information like keystrokes and visited websites. The vulnerabilities are rooted in components such as inotify (Linux, since 2005), FileObserver (Android, since 2008), ReadDirectoryChangesW (Windows, since 2000), and FSEvents (macOS, since 2007). Unprivileged users can exploit these subsystems to observe file events, potentially leading to keystroke timing attacks and credential theft. While Linux has implemented partial mitigations (CVE-2025-68788), Microsoft and Apple have acknowledged the issues but have not provided substantial patches.

AppWizard

September 26, 2026

Five Ad Blocker Hacks Every Android User Should Know

Ads are prevalent on Android devices, leading users to choose between enduring them or paying for premium subscriptions. BlockAds is a free, open-source app that blocks ads on Android by creating a local VPN, filtering traffic without requiring device rooting. Users can also employ DNS filtering to block ads by changing their DNS server settings, with services like AdGuard and NextDNS available for this purpose. Firefox supports the uBlock Origin extension for ad-blocking on Android, while NewPipe allows users to watch YouTube videos ad-free and access premium features. The DuckDuckGo browser includes a built-in YouTube ad blocker, and the Brave browser automatically blocks ads and trackers without additional setup.

Tech Optimizer

September 25, 2026

This Mac malware is somehow using iCloud calendar invites to try and steal your data

Cybercriminals have developed an infostealer called MacSync, targeting Mac devices by using iCloud calendar events and cloud storage. This malware disguises itself as fake cryptocurrency wallets and pirated software. It begins with a loader that retrieves instructions from calendar entries and deploys malware to exfiltrate sensitive information, including credentials and cryptocurrency wallets. Recent versions have introduced an Objective-C backdoor that mimics Finder. Victims are often tricked into downloading these malicious applications, and effective antivirus solutions can prevent damage. Cybercriminals use tactics like SEO poisoning and phishing to direct victims to fraudulent websites or social media promoting pirated software. In one case, the loader was marketed as a cryptocurrency wallet, and victims encountered a misleading ClickFix error message that prompted them to execute a command in the Terminal.

AppWizard

September 25, 2026

Ocean Browser , Secure Browser for Android

Ocean Browser is an Android application that provides a secure and private browsing experience by integrating advanced proxy technology, eliminating the need for separate VPN applications. It reroutes browsing traffic through its secure infrastructure, hiding users' actual IP addresses from websites. Ocean Browser offers features such as encrypted proxy connections, the ability to select proxy locations, and seamless management of proxy connections without complex settings. It is designed for everyday use, particularly on public Wi-Fi networks, and is available for free on Google Play.

Tech Optimizer

September 25, 2026

We Tested 10 Best Antivirus Software for 2026

Cybersecurity threats are on the rise, with Verizon’s 2026 Data Breach Investigations Report indicating that 48% of breaches involve ransomware and 31% arise from software vulnerabilities. A review of leading antivirus programs assessed their effectiveness against various threats. Top antivirus software includes: - Bitdefender: Best overall, effective against various threats, perfect score from AV-TEST. - Norton 360: Best all-in-one suite, includes VPN and parental controls, perfect score from AV-TEST. - McAfee+ Premium: Best for families, unlimited device coverage, full marks from AV-TEST. - Malwarebytes: Best for simple protection, user-friendly interface, rated 5.5/6 by AV-TEST. - ESET NOD32: Best for advanced users, lightweight and fast, includes Gamer Mode. - Avast: Best free option, offers various scanning options, straightforward upgrade path. - Microsoft Defender: Built-in for Windows, essential protection, perfect score from AV-TEST. - Intego ONE: Best for Mac users, includes firewall and VPN. - Surfshark Antivirus: Combines antivirus and VPN services, real-time protection. - TotalAV: Best for beginners, combines antivirus with web security tools. The evaluation process included lab data from AV-TEST and AV-Comparatives, hands-on experience, and criteria such as malware protection, false positives, system performance impact, phishing protection, ease of use, platform coverage, additional security features, and pricing. Key metrics from antivirus lab tests include protection scores, false positives, and performance impact. The choice between antivirus software and internet security suites depends on individual needs. Antivirus software remains necessary, especially for Windows PCs, to complement other security measures.

Winsage

September 24, 2026

uBlock Origin finally broke for me on Microsoft Edge, so I switched to Brave

Microsoft Edge users recently experienced a significant change as advertisements flooded the interface following the discontinuation of support for the uBlock Origin ad-blocking extension. This shift resulted from the transition away from Manifest Version 2 (MV2) extensions to Manifest Version 3 (MV3), which diminishes the effectiveness of ad blockers. As a result, users are considering alternative solutions or switching browsers. Brave has emerged as a viable option, maintaining support for MV2 extensions and offering effective ad-blocking features through its Brave Shields. Users can selectively block elements easily, although it lacks some features of uBlock Origin. The author plans to use Brave Shields for browsing while keeping the option to revert to uBlock Origin if needed.

Winsage

September 24, 2026

Chinese Hackers Exploit Chrome-Windows Zero-Day Chain to Deploy CLEANGULP Malware

A Chinese threat actor, codenamed UTA0565, has exploited newly disclosed vulnerabilities in Google Chrome (CVE-2026-85046, CVE-2026-87491) and Windows (CVE-2026-85880) through deceptive websites, achieving remote code execution. The attacks were detected on September 3 and 4, 2026, and involved impersonating organizations to mislead victims, particularly targeting Asian government entities with phishing emails related to Hong Kong activist Chow Hang-tung. The phishing messages directed users to fraudulent sites that loaded an HTML element using the BlueMoon exploit kit, which delivered a payload named "chrome_cleanup.exe," associated with the CLEANGULP malware family. This malware allows for command execution, process listing, file uploads and downloads, and uses a hard-coded domain for command-and-control communications. The exploit's widespread use suggests a coordinated effort within the Chinese cyber espionage community, with indications that multiple groups are sharing and weaponizing the exploit.

Winsage

September 21, 2026

Internet Explorer is finally, truly dying, and Microsoft wants you ready by 2029

Microsoft has announced the impending cessation of support for IE Mode in the Edge browser, urging organizations to begin their migration strategies. Initially set to be supported until the end of 2029, Microsoft is emphasizing proactive planning for transitioning away from legacy systems. A communication from Microsoft highlighted the importance of providing a year’s notice before the end of support for IE Mode, which is crucial for IT administrators managing legacy applications. IE Mode uses the Chromium engine while allowing access to web pages through Internet Explorer 11's Trident engine. Organizations still dependent on IE Mode need to evaluate their IT infrastructure and identify critical applications that require updates or replacements. Microsoft is offering its App Assure service to help eligible customers improve compatibility with modern Windows platforms. Early planning is essential to reduce migration risks and maintain operational efficiency.