NewApp Digest
search bot

WordPress

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More
Winsage
August 17, 2026

⚡ Weekly Recap: VMware Exploits, Windows 0-Day, MCP Attacks, Browser Hijacks and More

A suspected advanced persistent threat (APT) group linked to China exploited a newly patched vulnerability in VMware vCenter (CVE-2026-59310), which has a critical CVSS score of 9.8, allowing for arbitrary code execution and the deployment of Babuk-derived ransomware. A recently patched vulnerability in Apple macOS (CVE-2026-65400) has been exploited to deploy a cryptocurrency miner, granting unauthorized root access. The Lazarus Group from North Korea exploited a zero-day vulnerability in Microsoft Windows, targeting defense and aerospace sectors. GeoServer patched a critical SQL injection vulnerability that was actively exploited. A new macOS malware, Amnesia Stealer, targets users through ClickFix attacks, stealing data and allowing real-time access to authenticated sessions. A novel attack technique named GhostSplice can manipulate AI coding assistants. Research revealed a method exploiting Chromium's DevTools Protocol for data theft. Noteworthy CVEs this week include CVE-2026-68820, CVE-2026-58231, and multiple others across various platforms. A high-severity command injection flaw in FileRun allows remote code execution. An advanced ClickFix attack has been reported, deploying sophisticated malware. A heap overflow vulnerability in Citrix NetScaler was patched after indications of exploitation. A new malware loader targeting Portuguese-speaking users has been identified. A significant reduction in exposed Automatic Tank Gauge systems has been observed. A phishing campaign targeting Brazil has been detected, and an F.B.I. agent faces charges for unauthorized crypto withdrawals. Authorities in Ukraine dismantled fraudulent call centers, and a North Carolina man was sentenced for cyber extortion. Unauthorized access to sensitive data by the ExfilSquad group has been confirmed. LightSpy activity linked to China has been detected in over 13 countries. A supply chain attack exposed over 2,500 companies, and an Azure exfiltration campaign has exposed millions of enterprise records.
Automattic has introduced the Mesh app for Android
AppWizard
August 12, 2026

Automattic has introduced the Mesh app for Android

Automattic has launched the Android version of its app, Mesh, which helps users manage personal and professional contacts with privacy. Mesh allows users to visualize their network, add notes, and set reminders. The Android version utilizes features like split-screen mode, pop-up windows, and supports keyboard shortcuts on foldable devices. It includes in-app search, home screen widgets, and real-time synchronization. Mesh partially integrates with Automattic’s Beeper messenger for streamlined communication. Currently in early access, Nexus AI enhances user experience by enabling intuitive queries about contacts. Mesh prioritizes user privacy and operates on a subscription model, offering a free version with a limit of 1,000 contacts and paid tiers for unlimited contacts. Approximately 70% of users utilize Mesh for business purposes. The app, formerly known as Clay, is available on Google Play and compatible with various devices.
PostgreSQL Competes as Enterprise AI Memory Layer
Tech Optimizer
May 19, 2026

PostgreSQL Competes as Enterprise AI Memory Layer

Many AI systems face a challenge in maintaining continuity during inference, leading to a "memory" problem where models perform well in isolated interactions but struggle with context over extended workflows. This issue is particularly significant for operational AI, which requires a consistent understanding of context. Traditional AI architectures may not adequately address this gap, resulting in inefficiencies. The blog post proposes using PostgreSQL as a solution for durable memory, operational state, and governance in enterprise AI systems, enhancing the ability of AI models to retain context over time. A typical modern AI stack includes large language models, vector databases, object storage, caching mechanisms, workflow engines, orchestration tools, and observability frameworks. As organizations move from experimentation to production, coherent long-term context management becomes crucial, and integrating PostgreSQL could provide the necessary infrastructure for sustained operational success.
Похитители сид-фраз начали маскироваться под торренты
TrendTechie
August 17, 2025

Похитители сид-фраз начали маскироваться под торренты

The Efimer Trojan spreads through torrent files and targets cryptocurrency wallets by disguising itself as a media player named xmpeg_player.exe. Cybercriminals exploit poorly secured WordPress sites to distribute this malware, while in corporate settings, they use phishing emails related to copyright infringement to deliver the Trojan. Once activated, it searches for cryptocurrency seed phrases and replaces transfer addresses with those of the attackers. Victims have been reported in Russia, India, Spain, Italy, and Germany. Kaspersky Lab has also reported on another malware, SparkKitty, aimed at stealing cryptocurrency from users in Southeast Asia and China.
Троян Efimer крадет криптовалюту через торренты и сайты на WordPress
TrendTechie
August 8, 2025

Троян Efimer крадет криптовалюту через торренты и сайты на WordPress

A new Trojan named Efimer has been identified, which can alter cryptocurrency wallet addresses in the clipboard, redirecting funds to cybercriminals. Efimer spreads primarily through compromised WordPress sites and phishing emails. Once installed, it can disable Windows Defender, install a Tor client, and capture seed phrases and wallet addresses. It targets Windows users globally, particularly those in Brazil, Russia, India, Spain, Germany, and Italy. The Trojan primarily targets wallets holding Bitcoin, Ethereum, Monero, Tron, and Solana, but may expand to other cryptocurrencies. To protect against Efimer, users are advised to use reliable security solutions, create strong passwords, enable two-factor authentication, avoid downloading files from unverified sources, and not store seed phrases in plain text.
silver Android smartphone
Tech Optimizer
August 5, 2025

Building a job search engine with PostgreSQL’s advanced search features

Job search platforms connect employers and candidates through advanced search engines that analyze structured and unstructured data. These platforms require robust database technologies for executing complex queries, full-text and semantic searches, and geospatial functionalities. A modern job search engine consists of a data repository that stores job listings and candidate profiles, and a search engine that facilitates bidirectional searches. Key features of an effective job search engine include: - **Full-text search**: Provides lexical matching for job titles and skills, supporting exact phrase matching and typo-tolerant searches. - **Semantic search**: Uses vector-based similarity to understand context and relationships beyond literal terms. - **Geospatial search**: Incorporates geographic considerations to find opportunities within specific distances. PostgreSQL serves as both a data repository and search engine, supporting full-text search, semantic search via the pgvector extension, and geospatial queries using the PostGIS extension. The job search engine utilizes PostgreSQL to manage job listings and candidate profiles, enabling real-time searches across millions of entries. The data model for a job search engine includes tables for jobs and resumes, with columns for full-text search vectors, semantic vectors, and geographical locations. PostgreSQL's full-text search capabilities include tokenization, dictionaries for language-aware parsing, and ranking functions for relevance. Advanced features such as proximity search, simple and weighted ranking, and fuzzy matching enhance search accuracy. Vector embeddings represent text in high-dimensional space, allowing for semantic searches that recognize similar roles or skills. PostgreSQL supports vector similarity searches with specialized indexing methods like IVFFlat and HNSW for efficient querying. Geospatial search capabilities in PostgreSQL enable location-aware job searches, allowing candidates to find jobs within commuting distances. Combining different search techniques, such as full-text and semantic searches, provides more relevant results. Performance optimization features in PostgreSQL address challenges related to computational complexity, indexing overhead, and concurrent query loads. The architecture discussed is applicable to various applications beyond job search platforms, including e-commerce, real estate, content recommendation systems, travel, and healthcare provider matching.
Download WampServer (free) for Windows
Winsage
April 24, 2025

Download WampServer (free) for Windows

WampServer is a web development environment designed for Windows users, integrating MySQL, Apache, and PHP into a single package for local web application development. It simplifies the setup process, allowing novice developers to create functional development servers without affecting live websites. WampServer operates independently of an internet connection and provides a user-friendly control panel for managing server components. It supports both free-form PHP coding and content management systems like WordPress, Joomla, and Drupal. WampServer is free to use and compatible with Windows 7, 8, 10, and 11, but not with macOS or Linux. Alternatives to WampServer include MAMP, XAMPP, and Apache HTTP Server, each offering different features and compatibility.
Hackers target Taiwan with malware delivered via fake messaging apps
AppWizard
March 28, 2025

Hackers target Taiwan with malware delivered via fake messaging apps

Recent research from cybersecurity firm Sophos has identified the use of PJobRAT malware targeting users in Taiwan through instant messaging applications SangaalLite and CChat, which mimic legitimate platforms. These malicious apps were available for download on various WordPress sites, now taken offline. PJobRAT, an Android remote access trojan first identified in 2019, has been used to steal SMS messages, contacts, device information, documents, and media files. The recent cyber-espionage initiative lasted nearly two years, affecting a limited number of users, indicating a targeted approach by the attackers. The latest version of PJobRAT lacks the ability to steal WhatsApp messages but allows attackers greater control over infected devices. The distribution method for these apps remains unclear, but previous campaigns involved third-party app stores and phishing pages. Upon installation, the apps request extensive permissions and provide basic chat functionalities. Sophos researchers note that threat actors often refine their strategies after campaigns, suggesting ongoing risks.
PJobRAT Android Malware Masquerades as Dating and Messaging Apps to Target Military Personnel
AppWizard
March 28, 2025

PJobRAT Android Malware Masquerades as Dating and Messaging Apps to Target Military Personnel

PJobRAT is an Android Remote Access Trojan that re-emerged in 2023, targeting users in Taiwan. Initially known for targeting Indian military personnel, it now disguises itself as benign apps like ‘SangaalLite’ and ‘CChat’, distributed via defunct WordPress sites operational from January 2023 to October 2024, with domain registrations dating back to April 2022. The malware is spread through counterfeit applications resembling legitimate messaging services, prompting users to grant extensive permissions. Enhanced capabilities allow it to execute shell commands, access data from any app, root devices, and communicate with command-and-control servers via Firebase Cloud Messaging and HTTP. The campaign appears to have concluded, highlighting the evolving tactics of threat actors. Users are advised against installing apps from untrusted sources and to use mobile threat detection software.
Search