000 Archives

Tech Optimizer

September 4, 2026

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

A significant vulnerability in PostgreSQL, tracked as CVE-2026-6471, has been identified by cybersecurity firm Cyera. This flaw, present since 2014, allows attackers with minimal privileges to potentially take control of databases and servers. The vulnerability, known as PostGREShell, has a CVSS score of 7.2 and can be exploited for remote code execution and privilege escalation due to a missing authorization in the database's logical decoding mechanism. Attackers with 'Replication' privileges can load arbitrary files through the logical decoding plugin, executing code with the privileges of the postgres system user. This can lead to the elevation of privileges to superuser status, granting unrestricted access to all tables and the ability to execute operating system commands. All PostgreSQL versions from 9.4 to 18 are affected, with a patch available in versions 18.6, 17.11, 16.15, 15.19, and 14.24. Organizations are advised to update their PostgreSQL instances and audit their Replication accounts.

Tech Optimizer

September 4, 2026

EDB Postgres® AI Gains Momentum as Customers Tell Us the Future of Their Own AI and Data Platform

Organizations are increasingly aiming to establish their own governed AI and data platforms, with 95% of enterprises planning to develop such platforms within the next three years, though only 13% have done so. EDB has reported significant traction for its EDB Postgres® AI (EDB PG AI) platform, which unifies transactional, analytical, and agentic workloads into a single system. PAC 2000A Conad has revamped its data infrastructure using EDB PG AI to support over 1,600 stores and 7,000 connected devices, ensuring compliance with NIS2 regulations. C Platform in Korea is experiencing a surge in demand for hybrid and on-premises capabilities, driven by significant investment in sovereign AI and the AI Basic Act mandating governance for AI deployment. Notable adopters of EDB PG AI include the Industrial Bank of Korea, Shinhan EZ Insurance, NTT East, MNTN, Euronext FX, and Kyobo Book Centre.

Tech Optimizer

September 4, 2026

EDB Highlights Postgres AI Growth in Regulated Enterprise Markets

EnterpriseDB (EDB) has reported advancements in the adoption of its EDB Postgres AI (EDB PG AI) platform, which integrates transactional, analytical, and AI workloads. While 95% of enterprises aspire to become their own AI and data platforms within three years, only 13% have achieved this. EDB PG AI supports existing systems and prepares enterprises for future AI capabilities. A case study highlights PAC 2000A Conad, which restructured its data infrastructure with EDB PG AI, serving over 1,600 stores and 7,000 devices. In Korea, over billion has been invested in the sovereign AI market, with organizations seeking hybrid and on-premises solutions despite challenges from fragmented data environments. Notable users of EDB PG AI include the Industrial Bank of Korea and Shinhan EZ Insurance. EDB PG AI is built on Postgres and allows enterprises to optimize data and AI capabilities with governance at the data layer.

BetaBeacon

September 3, 2026

Xiaomi’s Poco has a gaming phone with sub

The Poco F9 Ultra is a phone that stands out by offering a built-in subwoofer, two stereo speakers, and a game audio mode for gamers. It features a 6.9 inch 185Hz AMOLED screen and is powered by the Qualcomm Snapdragon 8 Elite Gen 5 processor. The phone also includes three rear cameras, a massive 8050mAh battery, and will be available in Australia in a 512GB model with 16GB RAM for 9.

AppWizard

September 2, 2026

Star Wars Zero Company is a great game that’s busted and may never be fixed

Star Wars Zero Company has an aggregate critic score of 85 on Metacritic and is regarded as one of the most acclaimed Star Wars games recently. The game features tactical gameplay similar to X-COM but suffers from technical issues, particularly on PC, including traversal stutters, input lag, and game-breaking bugs. Players have reported frequent crashes, with some needing to restart missions multiple times. The game has a "mostly positive" rating on Steam from nearly 9,000 reviews, yet many highlight similar performance problems. Console players on Xbox Series and PlayStation 5 have also experienced these issues. Bit Reactor, the independent studio behind Zero Company, has furloughed a significant portion of its workforce, with reports indicating that up to 80 percent of employees are currently unpaid. The studio faces an ongoing legal dispute among its co-founders, and confidence in receiving adequate post-launch support is low. Acknowledgment of issues was made on Steam's Community forums on the game's release day, but no further updates have been provided since.

TrendTechie

September 2, 2026

Sony и Warner подают в суд на Anthropic из‑за обучения Claude на пиратских песенниках

Sony Music Publishing and Warner Chappell Music have filed a lawsuit against Anthropic, claiming that the company used pirated songbooks and song lyrics from "shadow libraries" to train its AI model, Claude. The lawsuit cites approximately 7 million books obtained through torrent downloads and web scraping, including unauthorized sheet music and songbooks. The plaintiffs are seeking statutory damages of up to 0,000 for each work that is found to have been willfully infringed. The lawsuit was filed on August 28, 2026, in the U.S. District Court for the Northern District of California, naming Anthropic and its co-founders as defendants. The plaintiffs allege that the data sources used for training included 5 million books downloaded from Library Genesis and 2 million from Pirate Library Mirror, as well as scraped song lyrics from licensed platforms Musixmatch and LyricFind. The use of BitTorrent for downloads introduces legal risks due to the simultaneous distribution of files. The lawsuit emphasizes the distinction between legally purchased and pirated materials, with prior cases indicating that downloads from pirate libraries constitute significant copyright infringement.

AppWizard

September 2, 2026

Fully Playable Scream Game Found in Steam Leak [2026]

A horror game based on the Scream film franchise was discovered in the Steam data leak that occurred from August 29 to 31, 2026. The game, an unfinished multiplayer prototype created by Fatshark, was found by a Twitter user named Roly Poly Reaper, who managed to run it on their computer and enable online multiplayer. The prototype included several unfinished builds, with one featuring operational networking code that allowed players to take on the roles of survivors evading a player-controlled Ghostface. The project appears to have been a pitch build, never fully greenlit for production, and was stored in Valve’s old Steam2 backend for approximately 15 years before the leak. Roly Poly Reaper used the Goldberg Steam emulator and Radmin VPN to run the game, circumventing the need for a live connection to Valve’s servers. Fatshark, known for cooperative shooters, had reportedly built the Scream prototype around 2011, coinciding with the release of Scream 4. The prototype's existence predates the popularization of the asymmetric horror genre by several years. The Steam2 leak itself involved approximately 12 to 13 terabytes of data, including various internal builds and beta versions from Valve and third-party developers. Valve has not publicly commented on the leak.

AppWizard

September 2, 2026

Adobe just released a Premiere beta for Android, but Googlebook will need much more

A leaked render from Lenovo suggests that Adobe Premiere may be coming to the upcoming Googlebooks. An Early Access version of the Premiere app is currently available for Android, but the experience on a Chromebook is subpar, resembling a mobile app that hasn't been optimized for larger screens. The app opens but has issues such as a stretched user interface and metadata errors during file imports. Adobe's early build is primarily aimed at Android phones, and there are concerns about whether a fully optimized version for Googlebooks will be available at launch. The anticipated price for the first Googlebooks is expected to start at 9+, and for it to compete effectively, a robust, desktop-class version of Premiere is essential.

Tech Optimizer

August 31, 2026

Fake Chrome update scam could infect your computer

A fake Chrome update scam has emerged, linked to a Chrome extension called Enable Right Click & Copy - Smart Unlock + OCR, which was initially legitimate but later compromised. The extension had around 70,000 users before being removed from the Chrome Web Store on August 14 due to its malicious nature. Users may encounter deceptive warnings while browsing benign sites, urging them to download files instead of using Chrome's built-in update mechanism. Google advises against engaging with suspicious pop-ups requesting software installations. The scam highlights that trusted extensions can become threats without warning, and users should regularly review their installed extensions and check for updates directly within Chrome. Similar fake update alerts have also been reported in other Chromium-based browsers. Users are encouraged to adopt safety measures, such as using strong antivirus software, reviewing browser extensions, and being cautious with downloaded files. If a suspicious file has been executed, users should treat their computer as potentially compromised and take appropriate security actions.

Tech Optimizer

August 31, 2026

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

Silver Fox is linked to the distribution of a backdoor malware called ValleyRAT, disguised as the legitimate QN Wallpaper adware application. Once installed, ValleyRAT provides complete control over the compromised machine. The malware uses DLL sideloading to operate under the guise of a legitimate process, bypassing security measures. It disables Windows Defender and adds itself to autorun entries, and can mark its process as critical, causing system crashes if terminated. Kaspersky has identified specific indicators of compromise (IoCs) including hashes, command-and-control servers, and associated domains. In 2026, Kaspersky recorded over 100,000 detections of ValleyRAT affecting more than 1,500 unique users, mainly in China and India.