API Archives

Winsage

July 15, 2026

LabubaRAT malware infiltrates Windows systems while posing as NVIDIA software

LabubaRAT is a newly identified Rust-based remote access tool (RAT) that disguises itself as NVIDIA software to facilitate operations on Windows systems. It establishes a reusable foothold for hands-on activity and can profile the host system, identify security tools, execute commands, transfer files, capture screenshots, and proxy network traffic. LabubaRAT retrieves its configuration at launch via command-line arguments or environment variables, allowing operators to specify parameters like the command-and-control server and API key at runtime. It maintains local state in a SQLite database and supports communication through HTTPS polling, Microsoft Edge WebView2, and DNS tunneling. The malware includes capabilities for command execution, file handling, and establishing persistence through a Windows Run registry key. The entry point for the attack is an executable named nvidia-sysruntime.exe, which masquerades as NVIDIA’s container runtime toolkit. LabubaRAT conducts thorough profiling of the host, checking for installed browsers and security products, and gathers information on the system's specifications. Blackpoint Cyber has shared indicators of compromise to help detect LabubaRAT activity.

Winsage

July 15, 2026

Microsoft: Some Dell PCs shut down after recent Windows updates

Microsoft has temporarily halted the rollout of the Windows 11 security updates for certain Dell devices due to reports of shutdowns and performance issues linked to the KB5101650 cumulative update. The issues began after the installation of the June 23, 2026, preview update (KB5095093), which caused a conflict with the Intel Innovation Platform Framework Processor Participant driver. Affected Dell systems are showing a yellow exclamation mark in Device Manager and may experience unexpected shutdowns, poor performance, increased heat, and battery drain. Microsoft is working with Dell to resolve the issue and will not distribute the KB5101650 update to impacted systems until a fix is implemented.

Winsage

July 14, 2026

Microsoft Patch Tuesday for July 2026 — Snort rules and prominent vulnerabilities

Microsoft's July 2026 security update addresses 622 vulnerabilities, with 57 classified as "critical." Two critical vulnerabilities, CVE-2026-56155 (Active Directory Federation Services) and CVE-2026-56164 (Microsoft SharePoint Server), have been exploited in the wild. The critical vulnerabilities include 48 remote code execution (RCE) vulnerabilities, seven elevation of privilege (EoP) vulnerabilities, one spoofing vulnerability, and one security feature bypass vulnerability. RCE vulnerabilities affect various Microsoft services, including Windows Media, Microsoft Office, and SQL Server, with eleven rated as "more likely" to be exploited. Additional important vulnerabilities include CVE-2026-49170, CVE-2026-49795, and CVE-2026-50325. Talos is releasing a new Snort ruleset to detect these vulnerabilities, and Cisco Security Firewall customers are advised to update their ruleset.

Winsage

July 14, 2026

Microsoft Releases July 2026 Patch Tuesday Updates

Microsoft has released the July 2026 Patch Tuesday updates for Windows 11 versions 26H1, 25H2, and 24H2, introducing several key features: - A new recovery feature allows users to revert their PCs to a recent restore point. - The Widgets experience has been revamped to minimize distractions, including no longer opening upon hover and reduced memory usage. - Users can pause Windows updates for up to 35 days and re-pause them as needed. - A new screen tint feature applies a color overlay to reduce eye strain. - Magnifier now offers preset zoom increments and allows specific zoom percentages to be input. - Bluetooth connectivity improvements include quicker pairing for Apple’s AirPods and better reliability for Beats Studio Pro headphones. - Voice access and voice typing features are now available in French, German, and Spanish. - Users can customize the right-click zone size on touchpads with a pressable surface. - The emoji panel now uses GIPHY for GIF content. - Taskbar notification counts and badge visuals will update accurately. For Qualcomm-powered PCs running Windows 11 version 26H1, the KB5101649 update includes the Point-in-time restore feature and introduces new NPU usage metrics in Task Manager, the option to assign a custom user folder name during setup, and allows multiple applications to access the camera stream simultaneously. Improvements have also been made to Windows Hello authentication and Microsoft Store performance, along with enhancements to Windows Search for better file location and prioritization.

AppWizard

July 14, 2026

The Best Mac Games for 2026

Balatro, Crimson Desert, and Stardew Valley have been added to the lineup of recommended Mac games. The Mac platform has historically lagged behind Windows in gaming but is improving due to Apple's porting tools. Many games are now available at launch or shortly thereafter on Mac. Crimson Desert was released on Mac simultaneously with its launch on PC, PlayStation 5, and Xbox Series X/S. The games mentioned can be found on Steam and include GRID Legends and Resident Evil Village, which are available in the Mac App Store.

AppWizard

July 14, 2026

It’s Monday, and Steam is currently struggling just like the rest of us

On July 13 at 11:30 PT, Steam experienced intermittent downtime and various errors affecting the store, community hub, and game APIs. Users reported that the store and community pages had a "Very Slow" status, and Deadlock's multiplayer API showed an Internal Server Error. The Steam API displayed erratic behavior, with users encountering "Bad Gateway" errors. By the end of the day, all systems were reported to be functioning normally.

Tech Optimizer

July 12, 2026

What Is Serverless PostgreSQL?

Serverless PostgreSQL is a fully managed cloud database model that separates compute and storage, allowing them to scale independently and automatically based on demand. It eliminates the need for manual infrastructure provisioning and capacity planning, charging only for active usage. Unlike traditional PostgreSQL setups, which require continuous resource allocation and manual scaling, serverless PostgreSQL provisions resources on demand and can scale down to zero during idle periods. Serverless PostgreSQL integrates with serverless compute platforms, enabling analytical queries to access the same data within a unified architecture. Key differences between traditional and serverless PostgreSQL include manual versus automatic provisioning and scaling, fixed versus usage-based billing, and high versus reduced operational overhead. Lakebase architecture is an emerging model that combines transactional databases with lakehouse foundations, allowing operational and analytical workloads to coexist on a single platform. This architecture minimizes data duplication and simplifies access, enhancing data management and analysis. Serverless PostgreSQL operates on a cloud-native architecture that enhances efficiency by allowing compute and storage to scale autonomously. It features scale-to-zero behavior, where compute resources are suspended when inactive and reactivated upon new queries. Major providers include Databricks Lakebase, Amazon Aurora Serverless v2, and Neon, each offering varying capabilities and integrations. Pricing for serverless PostgreSQL typically includes charges for compute resources, storage, and data transfer, with costs fluctuating based on workload activity. Cold start latency is a performance consideration, as reactivating compute resources can introduce delays. Strategies to mitigate this include keeping resources partially active or selecting providers with minimal cold start impacts. Serverless PostgreSQL is well-suited for OLTP workloads, while lakebase architecture is better for AI development, variable workloads, and environments requiring rapid iteration. Setting up serverless PostgreSQL involves choosing a provider, creating a database instance, and configuring access settings. It can also be used alongside serverless compute platforms for analytics, further extending its capabilities.

Tech Optimizer

July 12, 2026

Running pgvector in production on Amazon Aurora PostgreSQL

Running pgvector on Amazon Aurora PostgreSQL-Compatible Edition offers a vector store with operational capabilities, high availability, and scalability. It is favored for Retrieval Augmented Generation (RAG) workloads transitioning to production, but increased traffic introduces challenges like query latency and memory management. Key operational practices for pgvector workloads include selecting the appropriate index type (HNSW or IVFFlat), establishing a baseline schema, choosing a suitable distance operator, scaling the index through quantization and partitioning, and preparing for churn and observability. The prerequisites for using pgvector include an Aurora PostgreSQL-Compatible cluster with specific PostgreSQL versions and the vector extension enabled. The embedding model used in examples is Amazon Titan Text Embeddings V2, which produces 1024-dimensional embeddings. pgvector supports two Approximate Nearest Neighbor (ANN) index types: HNSW, which is efficient for querying and allows for incremental insertions, and IVFFlat, which is less resource-intensive but requires rebuilding if data changes. There are scenarios where forgoing an index is beneficial, such as small datasets or partitioned datasets requiring 100% recall. A baseline schema for a multi-tenant document store includes creating a table for documents with an embedding vector and establishing indexes for tenant IDs and embeddings using HNSW. The recommended parameters for HNSW include m = 16 and ef_construction = 128. Scaling to millions of vectors involves quantization, tuning HNSW parameters, and partitioning. Aurora Optimized Reads can extend effective cache capacity, and managing index churn is crucial for maintaining performance. Observability metrics include query-level statistics, instance-level metrics, and custom application-defined metrics. To clean up after testing, it is advisable to drop the created indexes and tables, and delete the Aurora PostgreSQL-Compatible cluster and any manual snapshots taken during testing.

AppWizard

July 7, 2026

Minecraft Preview 26.40.30

Players can find abandoned camps in the Pale Garden and Flower Forest biomes, which include a one-time use Straw Bed crafted from three hay bales. Cushions, available in 16 colors and crafted from three wool slabs, allow players to sit comfortably but are not currently spawning in abandoned camps. Various gameplay and graphical improvements have been made, including fixes for crafting recipes, ambient sounds, and rendering issues. Additionally, there are updates to the user interface, technical features, and stability enhancements, such as improved server self-repair capabilities and bug fixes related to commands and entity behavior.

AppWizard

July 5, 2026

You can now play Half-Life 2 right inside your browser at over 100 FPS with save states & console support — Ingenious port recreates the entire game campaign using WebGL 2

A fully playable browser version of Half-Life 2 has been released, created by developers Slqnt and 98006 in three months. This version includes the entire main campaign and two episodic DLCs, operating natively on devices without cloud streaming. It utilizes WebGL 2 and WebAssembly to run graphics-intensive tasks and translate C++ code into JavaScript. The port features a Source console for accessing developer commands, though it does not support Steam achievements. Testing on various devices showed the best performance on a Windows PC, achieving over 100 FPS. The future of the port depends on Valve's response, and while copyright issues pose challenges, many classic games are available for free online.