Impress Computers

Your Computer May Soon Require an Age Check. And You Might Have to Prove It

Age verification laws are moving beyond p**n sites and social media. Soon, your operating system could be required to check your age and share it with apps and websites.

Age verification laws are no longer limited to p**n sites. After more than two dozen US states passed laws targeting adult websites like PornHub—and Utah moved against VPN use—the next battleground is your operating system.

Starting in 2027, California's Digital Age Assurance Act will require operating systems, including Windows, macOS, Android, ChromeOS, and Linux distributions, to ask users for their age during device setup and share an age range with apps. Depending on how future laws evolve, that process could eventually involve government IDs, credit cards, or biometric verification.

https://www.pcmag.com/explainers/your-computer-may-require-an-age-check-might-have-to-prove-it

Enterprises report increasing budgets for security training in AI and other critical topics

Finding the time to train employees remains the biggest impediment to programs’ success, according to a new report.

With cybersecurity risks growing more complex, companies are investing in their workers to combat phishing, ransomware and other threats. Roughly three-quarters (73%) of respondents said their organizations had increased their security training budgets in the past year. One-fifth of organizations exclusively rely on in-house staff to deliver training materials, while 43% mostly rely on in-house staff but also use third-party vendors, and 27% split the work evenly between staff and third parties.

Larger organizations were more likely to report using third-party training companies, perhaps because of the costs associated with those services.

Monthly training sessions were the most popular approach for keeping security personnel up to date with the latest threats and strategies, with 36% of respondents saying they used this approach. Thirty-four percent of respondents said they trained their security teams quarterly, and 15% said they trained weekly.

https://www.cybersecuritydive.com/news/cybersecurity-training-budget-increases-ai-skills/822640/

It’s easy to assume your business will run fine without you. Most owners think that, until they actually step away.

That’s when things start to slip.

A few things usually tell you what’s really going on:

• Do your processes run on their own or need constant attention?
• When something breaks, does it get handled or does it come back to you?
• Can your team move forward without checking in?
• Are issues caught early or only when they become a problem?

If too much still depends on you, time off won’t feel like time off.

What Is a DDoS Attack and How Does It Work?

A complete guide to DDoS attacks — how distributed denial-of-service attacks work, the main types, why attackers launch them, and how to defend against them.

Most cyberattacks try to break in quietly — to steal data or take control without being noticed. A DDoS attack does the opposite. It is loud, disruptive, and immediately obvious: its entire purpose is to knock a website or online service offline by overwhelming it with traffic.

DDoS stands for distributed denial-of-service, and these attacks are among the most common disruptions on the internet. They can take down a company's website, freeze an online store during peak sales, or disrupt critical services for hours at a time — without the attacker ever stealing a single file.

This guide explains DDoS attacks in full: what they are, how they differ from a basic denial-of-service attack, how they work, the main types, why attackers launch them, and how organizations defend against them. It is part of our broader guide to the types of cyberattacks.

https://www.thecybersignal.com/what-is-a-ddos-attack-and-how-does-it-work/

Meet Pippin! 🐾

This adorable 8-week-old kitten was rescued by an IMPRESS technician from under the hood of a parked truck.

After a much-needed bath, Pippin was finally clean, safe, and feeling much more comfortable. He was dirty, frightened, and all alone when he was found.

We're happy to share that Pippin has now joined a loving family and is settling into his new home. ❤️

A wonderful reminder that a little kindness can change a life.

From under a truck hood to a forever home! 🐱💕

www.ImpressComputers.com
281-647-9977

Impress Computers MSP It Support Company that Specializes in Cyber Security and 24/7 Support

Over 50 Android Apps Found Spreading MagicAd Trojan via Official Stores

Over 50 Android apps on official stores spread MagicAd trojan, using system tricks to force background ads even after infected apps are closed.

A deceptive trojan is outsmarting Android’s built-in defences to bombard users with unstoppable background advertisements. Security analysts at Doctor Web recently found Android.MagicAd.1, a trojan malware that manipulates legitimate phone systems to force-feed ads even when all app windows are closed.

This is a frustrating trick, proving that ad-delivering threats are no longer just a minor nuisance but highly engineered tools designed to break safety rules.

The Infection Chain

Android.MagicAd.1 first appeared in 2025, but researchers say it is now being pushed through more than 50 infected games and utility apps. The malicious apps were not limited to shady download sites either. They were distributed through official app stores, including Samsung Galaxy Store and Xiaomi’s GetApps catalogue.

Some games and programs from the GetApps catalogue hiding Android.MagicAd.1 (Credit: Doctor Web)
To evade early detection by security scanners, the hackers rotated their apps, keeping them online for less than a month before swapping them with new versions. However, once downloaded, the trojan remained active on user devices.

https://hackread.com/android-apps-magicad-trojan-official-stores/

New attack turned Microsoft 365 Copilot into 1-click data theft tool

A critical vulnerability chain dubbed SearchLeak in Microsoft 365 Copilot Enterprise could allow attackers to steal sensitive data from a target's mailbox, OneDrive, or SharePoint account through a specially crafted URL.

The exfiltrated information could be email content (e.g., access codes, passwords), calendar events and meeting details, documents, and other content accessible through Copilot Enterprise Search.

Microsoft addressed SearchLeak at the beginning of the month and assigned it the CVE-2026-42824 identifier with a maximum severity, critical rating.

https://www.bleepingcomputer.com/news/security/new-attack-turned-microsoft-365-copilot-into-1-click-data-theft-tool/

In 1995, Microsoft shipped a cartoon-house interface called Bob, led by Melinda French, who married Bill Gates while it was in development — it demanded twice the memory of a typical home PC, sold roughly 30,000 copies, and was dead within a year, leaving behind the font Comic Sans and the animated assistant that became Clippy.

Microsoft Bob arrived on March 31, 1995, as a cartoon house. Click the clock and you got a calendar; click the pen and you got a word processor; click the checkbook and you got finance software. A tail-wagging dog named Rover leaned into the corner of the screen and offered to help you write a letter to your grandmother, explaining what a salutation was and suggesting a closing. It was the most ambitious attempt anyone had yet made to hide an operating system behind a friendly face.

Within twelve months, Bob was dead.

https://maketecheasier.com/mte-microsoft-bob-s-1995-launch-event-in-new-york-featured-bill-gates-demonstrating/

FBI disrupts massive AI-powered phishing service using a million URLs

In a coordinated effort, the FBI, working with Google and Black Lotus Labs, has dismantled a massive Chinese phishing-as-a-service operation called Outsider Enterprise with thousands of phishing websites used to steal credit card data and passwords.

The cybercrime operation used AI and distributed phishing kits for campaigns impersonating various trusted brands in texts sent through AT&T, T-Mobile, and Verizon.

Outsider Enterprise has been active since at least 2023 and operated at a massive scale, with Google linking to it 9,000 fake websites and more than a million fraudulent URLs.

Authorities believe that phishing campaigns powered by Outsider Enterprise led to stealing more than 3.8 million credit card records, causing an estimated $1.9 billion in losses.

https://www.bleepingcomputer.com/news/security/fbi-disrupts-massive-ai-powered-phishing-service-using-a-million-urls/