Honestly, they could either send the files over LAN, or just use their own servers if LAN wasn't convenient enough.

Using Google Drive for this sounds like a great way to get rate-limited really quick. If not, it's still a really bad idea, lmao.

🧑‍💻 @agamtechtricks

EU's new Age Verification app got hacked in under 2 minutes

The app asks to create a PIN during setup, and then encrypts it and saves it in the shared_prefs directory.

The attacker can then remove the PinEnc/PinIV values from shared_prefs and restart the app, and then after choosing a different PIN, the app presents credentials created under the old profile and let's the attacker present them as valid.

You can bypass the rate limit by resetting the value in the config file to 0.

If you want to entirely skip the biometrics, you can just set "UseBiometricAuth" boolean to false.

After you have verified your age, there's an "Estimated Expiry Date" after which you'll have to verify your age again. Will I become a minor after 3 months?

🔗 Paul_Reviews
🧑‍💻 @agamtechtricks

Windows Defender zero-day grants SYSTEM privileges

After "BlueHammer" (now patched), the new PoC exploit called "RedSun" grants SYSTEM privileges in Windows 10, 11, and Server when Defender is enabled.

This Exploit uses the "Cloud Files API", writes EICAR to a file using it, uses an oplock to win a volume shadow copy race, and uses a directory junction/reparse point to redirect the file rewrite (with new contents) to C:\Windows\system32\TieringEngineService.exe. At this point, the Cloud Files Infrastructure runs the attacker-planted TieringEngineService.exe (which is the RedSun.exe exploit itself) as SYSTEM.

If this is too technical for you, whenever Defender detects that the file has a cloud tag, it rewrites the file to the original location. This exploit is then used to overwrite system files, which grants SYSTEM privileges.

🔗 Will Dormann
🧑‍💻 @agamtechtricks

Netflix is adding a vertical video feed with AI recommendations

A TikTok-like vertical video feed is now being added to Netflix by the end of April, after testing it for a year. The feed will show clips from shows and movies, with AI recommendations.

This is part of a major redesign of Netflix for iOS.

In addition to continued innovation on our new TV UI, after a period of testing and iteration, we are launching an updated mobile experience at the end of the month that includes a vertical video discovery feed. This redesign will better reflect our expanding entertainment offering and make it easier for members to engage how and when they want.

🔗 Shareholder Letter
🧑‍💻 @agamtechtricks

The Google App is now available for Windows

With the Google App, you can get responses with AI Mode and ask about anything on your screen with screen sharing and Lens. You can also find apps and files from your computer and Google Drive.

To access Google app, press Alt+Space.
Available for Windows 10+ users.

🔗 Google
🧑‍💻 @agamtechtricks

Gemini app is now available for macOS

Gemini for macOS is a native Swift app with Liquid Glass support. You can ask questions, write emails, summarise articles, get coding help, analyze images, etc. You can share your window as well.

Access Gemini with:
- Option+(Shift)+Space (customisable)
- Menu Bar
- App Dock
Available for macOS 15+ users.

🔗 Google
🧑‍💻 @agamtechtricks

Apps not registered to a verified identity will not be installable on Android

According to a mail sent by Google to developers with apps currently in the Play Store, if you do not register your app to a developer with a verified identity, it will not be available for installation (in select countries).

🔗 Izzy
🧑‍💻 @agamtechtricks

Start Menu is being rebuilt for better performance

Microsoft is working on a major update to the Start menu. It will be rebuilt on native WinUI 3 (currently uses React) and will be faster and more responsive. Search will be quick as well, without it missing any keys.

There will be advanced customisation options which can be configured in the Settings app, like turning off specific sections (even the all apps list) and choosing a small or large Start menu layout.

🔗 Windows Central
🧑‍💻 @agamtechtricks

WhatsApp Plus is getting new premium features

WhatsApp Plus is WhatsApp's optional subscription plan, which offers extra features by paying a monthly fee.

Features:
- Premium Stickers (with some including full-screen overlay animations)
- App theme with 18 color options
- Custom app icon with 14 options
- Pin up to 20 chats
- 10 exclusive ringtones
- Change settings of chats in bulk

The premium plan is currently focused on Android.

🔗 WABetaInfo
🧑‍💻 @agamtechtricks

Vercel has been breached

Vercel has been breached by an attacker who discussed an alleged ransom demand of $2 million with Vercel on Telegram.

The attacker claims to be a part of ShinyHunters, but ShinyHunters has denied any involvement.

Some internal systems and env vars (including NPM and GitHub tokens) not marked as "sensitive" (not encrypted) were accessed. The attacker also shared 580 data records of Vercel employees, and a screenshot of an internal Vercel Enterprise dashboard, but the authenticity isn't confirmed.

Next.js, Turbopack, and other open-source projects remain safe.

How it happened:
An employee logged into an AI tool Context.ai with Google OAuth, which enabled the attacker to access the employee's Google Workspace account.

🔗 Vercel | BleepingComputer
🧑‍💻 @agamtechtricks

John Ternus will become the new Apple CEO

John Ternus will become Apple’s next chief executive officer effective on September 1, 2026. Tim Cook will become executive chairman of Apple’s board of directors.

Under Cook’s leadership Apple has grown from a market capitalization of approximately $350 billion to $4 trillion, and yearly revenue has nearly quadrupled, from $108 billion in fiscal year 2011 to more than $416 billion in fiscal year 2025.

Ternus has overseen hardware engineering work on a variety of groundbreaking products, such as iPad and AirPods, as well as many generations of products across iPhone, Mac, and Apple Watch.

🔗 Apple
🧑‍💻 @agamtechtricks

Ookla Speedtest will now be available from Windows Taskbar

Ookla and Microsoft announced an expanded partnership, establishing Speedtest as the integrated network performance testing platform across Bing and Windows.

You can now launch a speed test powered by Ookla from common Windows networking entry points without manually opening the browser and searching.

🔗 Ookla
🧑‍💻 @agamtechtricks

noone said it here

GUYS WISH AGAM HAPPY BIRTHDAY!!!

Meta to Track U.S. Employees' Keystrokes and Screens to Train Al Agents

Meta is installing a tool called 'Model Capability Initiative (MCI)' on U.S. employees' computers which will log mouse movements, clicks, keystrokes and occasional screenshots. There will be no opt-out for work devices.

This data will be used to improve AI models that struggle in replicating how humans interact with computers, like choosing from dropdown menus and using keyboard shortcuts.

🔗 Reuters
🧑‍💻 @agamtechtricks

France's National agency that manages citizens' IDs has been breached

On April 15, the National Agency for Secure Documents (ANTS) got breached. The data breached from the portal includes:
• Login ID
• Full name
• Email address
• Date of birth
• Unique account identifier
• Postal address (for some)
• Place of birth (for some)
• Phone number (for some)

This data can be used for phishing and social engineering attacks, but not for unauthorized access to the portal, so no action is required. The attacker 'breach3d' claims to have stolen 19 million records, while ANTS has not disclosed any numbers.

🔗 ANTS
🧑‍💻 @agamtechtricks

What do y'all have in your dock? I'll start first

🧑‍💻 @agamtechtricks

I can't be the only one with folders