certification

Winsage
April 13, 2026
Microsoft will enforce a new mandate requiring all hardware drivers to comply with the Windows Hardware Compatibility Program (WHCP) standards starting April 1, 2026. This change will eliminate the "cross-signing" system that allowed older drivers with expired certificates to remain trusted. The enforcement of WHCP certification will apply to various versions of Windows 11 and Windows Server 2025. Users may face blocks when installing older drivers on new systems, but existing installations will not be immediately disrupted. Microsoft plans to introduce an "allow list" for vetted legacy drivers to ensure essential equipment remains operational during the transition. The initial rollout will occur in "evaluation mode," allowing Microsoft to monitor driver behavior without blocking software. For corporate environments, Microsoft offers "Application Control for Business" to allow specific software while maintaining security measures.
Tech Optimizer
April 8, 2026
Discussions on digital sovereignty are shifting from infrastructure to databases, driven by geopolitical pressures in Europe. Hyperscalers like Amazon and Microsoft are investing heavily to comply with new regulations, prompting organizations to reconsider their reliance on managed cloud services. Many enterprises are now viewing PostgreSQL as a portable, cloud-neutral foundation to ensure consistent behavior across various environments, leading to interest in Sovereign DBaaS. Gabriele Bartolini, VP and Chief Architect of Kubernetes at EDB, emphasizes that true sovereignty starts with the database and that portability enhances negotiating leverage and compliance. Bartolini warns that while managed cloud services offer convenience, they often sacrifice control. He notes that transitioning away from these services can provide long-term leverage, as evidenced by Microsoft's encouragement for customers to run self-managed PostgreSQL. The Operator Pattern in Kubernetes enables better database management and lifecycle control, with CloudNativePG exemplifying this approach. Bartolini asserts that owning hardware allows organizations to better manage costs, especially for resource-intensive AI workloads, and that moving to bare metal can significantly enhance performance. A cultural shift is necessary for success, with DBAs needing to adapt to cloud-native environments. Bartolini encourages DBAs to develop a broader understanding of Kubernetes to enhance collaboration across teams. He warns that the database team cannot drive change alone and must align with the entire infrastructure direction to avoid dependency on proprietary tools that limit independence and innovation.
Tech Optimizer
April 1, 2026
Independent benchmarking by McKnight Consulting Group shows that EDB Postgres AI for WarehousePG provides significant cost efficiency and performance consistency, with organizations potentially saving up to 58% in total cost of ownership compared to leading cloud data warehouse solutions. The evaluation compared EDB PG AI against competitors like Snowflake, Databricks, Amazon Redshift, and Hive on Apache Iceberg using a 10TB extended TPC-DS dataset, focusing on high-concurrency mixed workloads. Key findings include: - EDB PG AI demonstrated unmatched cost efficiency, with an annual cost of ,886 compared to Snowflake’s ,953 for a multi-cluster setup. - It exhibited superior concurrency handling, with the lowest performance slowdown of 2.7x when scaling from one to five concurrent users, outperforming Snowflake (3.9x), Redshift (4.0x), and Databricks (4.1x). - EDB PG AI's core-based, capacity-pricing model eliminates unpredictable pricing fluctuations associated with consumption-based models. EDB announced Q1 2026 platform updates, including: - GPU-Accelerated Analytics for 50–100x faster analytics on large datasets. - Enhanced Agent Studio for quicker AI agent development and deployment. - Upgraded Vector Engine for improved indexing speed and efficiency. - WarehousePG Enterprise Manager for simplified management of MPP workloads. - Agentic Database Management with a native chatbot for natural language database management. - Certification as a mission-critical data layer for the Red Hat Ansible Automation Platform.
Winsage
March 28, 2026
Microsoft has confirmed a major kernel security update for Windows 11, revoking trust in older drivers signed through an outdated cross-certification program. The update will ensure that Windows 11 accepts only software that has passed the Windows Hardware Compatibility Program's testing standards. This change aims to counter piracy attempts, particularly against a hacker known as DenuvOwOA, who bypassed Denuvo's anti-piracy protection by manipulating the embedded hypervisor and loading unsigned or vulnerable drivers. The new security policy will block the execution of such code, making existing hacking methods obsolete. The rollout will begin in compatibility assessment mode for Windows 11 and Windows Server & Hosting, with a hard block activated only if no stability issues are detected. Corporate clients can manually add certificates through the Application Control for business tool, while gamers will find it increasingly difficult to run hacked games relying on a modified hypervisor.
Winsage
March 27, 2026
Microsoft is enhancing the security of the Windows kernel by eliminating trust for kernel drivers not certified through the Windows Hardware Compatibility Program (WHCP) starting with the April 2026 Windows Update. This change specifically targets kernel drivers signed by the now-obsolete cross-signed root program, which has been associated with security vulnerabilities. The new policy will initially be introduced in an "evaluation mode" to monitor and audit driver loads for potential compatibility issues. Custom kernel drivers can still be used under the Application Control for Business policy, but must be signed by an authority within the device's Secure Boot Platform Key or Key Exchange Key variables. The changes will impact Windows 11 versions 24H2, 25H2, 26H1, and Windows Server 2025.
Tech Optimizer
March 27, 2026
A deceptive website impersonating Avast antivirus tricks users into downloading Venom Stealer malware, which steals passwords, session cookies, and cryptocurrency wallet information. The site conducts a fake virus scan, falsely reporting threats to encourage users to download a malicious file named Avastsystemcleaner.exe. This file mimics legitimate software and operates stealthily, targeting web browsers to harvest credentials and session cookies. It also captures screenshots and sends stolen data to the command-and-control domain app-metrics-cdn[.]com via unencrypted HTTP. The malware employs evasion techniques to avoid detection and is part of a long-standing cybercrime tactic that exploits user trust in security software. Indicators of compromise include the file hash SHA-256: ecbeaa13921dbad8028d29534c3878503f45a82a09cf27857fa4335bd1c9286d, the domain app-metrics-cdn[.]com, and the network indicator 104.21.14.89.
Tech Optimizer
March 11, 2026
Netflix has developed an internal automation platform to migrate Amazon RDS for PostgreSQL databases to Amazon Aurora PostgreSQL, reducing operational risks and downtime for nearly 400 production clusters. The platform allows service teams to perform migrations through a self-service workflow while ensuring processes like replication validation and rollback safeguards are maintained. Database access is managed through a platform-managed layer using Envoy, which standardizes mutual TLS and abstracts database endpoints, enhancing security and efficiency. The migration process starts with creating an Aurora PostgreSQL cluster as a read replica of the source RDS instance, initialized from a storage snapshot and continuously replaying write-ahead log (WAL) records. Validation checks are performed to ensure the replica can handle peak write throughput before cutover. For change data capture workloads, the system coordinates the state of replication slots and pauses CDC consumers to prevent excessive WAL retention. The Enablement Applications team at Netflix successfully migrated databases for device certification and partner billing workflows, addressing issues like elevated replication lag due to inactive logical replication slots. As replication lag decreases, the system enters a controlled quiescence phase, adjusts security rules, and reboots the source RDS instance. Once all transactions are processed and the Aurora replica is ready, it is promoted to a writable cluster, and traffic is rerouted. Rollback capabilities are prioritized, allowing redirection back to the original RDS instance if validation checks fail or anomalies are detected post-promotion. This setup enables seamless restoration without redeployment, and CDC consumers can resume from recorded slot positions if needed.
AppWizard
March 6, 2026
Google has submitted proposed modifications to its Android app store operations to a federal court in San Francisco in response to Epic Games' antitrust lawsuit from August 2020. The proposed changes include a revised fee structure that lowers baseline commissions on subscriptions and e-commerce transactions, offers app developers an alternative payment processing option, and allows developers to use payment systems outside of Google's ecosystem. Consumers will be able to download applications from alternative app stores that meet a certification process. These changes require judicial approval and are part of a broader overhaul mandated by a federal judge in October 2024. Google has requested a hearing on April 9 to clarify questions regarding the proposed changes and plans for a global rollout, initially focusing on the United States, the United Kingdom, and the European Union, pending regulatory approvals.
BetaBeacon
March 5, 2026
Google plans to lower fees on its Android app store, reducing commissions for subscriptions and e-commerce transactions to a range of 10% to 20% and introducing a new payment processing option that charges only 5%. Developers will have the choice to use payment processing systems other than Google's, and consumers will be able to access apps from alternative stores that have undergone a certification process.
Search