NewApp Digest
search bot

cloud platform

Microsoft's new Azure Linux 4.0 is here, and it could replace Windows Server in the enterprise
Winsage
July 2, 2026

Microsoft’s new Azure Linux 4.0 is here, and it could replace Windows Server in the enterprise

Microsoft has released Azure Linux 4.0, transitioning it from an internal tool to a server operating system that users can install on their own servers and virtual machines. Azure Linux 4.0 is built on Fedora Linux, allowing the use of RPMs and ensuring compatibility with Azure's cloud platform. The beta version features a hardened Linux kernel 6.18, optimized for performance on Hyper-V and Azure virtual machines, and incorporates SELinux-based security measures without a graphical user interface. In the Azure Marketplace, it is marketed as a "Microsoft-built Linux distribution for Azure," with formal support available for deployments on Azure but not for standalone hardware. The Azure Linux GitHub repository provides transparency into the distribution, encouraging community engagement while Microsoft retains control over the base image's contents. Azure Linux is positioned as a free, Azure-optimized server operating system for hybrid environments, potentially signaling a shift away from Windows Server.
Active Exploitation of Critical CVE-2026-20253 in Splunk Enterprise: Unauthenticated RCE via PostgreSQL Sidecar Service
Tech Optimizer
June 23, 2026

Active Exploitation of Critical CVE-2026-20253 in Splunk Enterprise: Unauthenticated RCE via PostgreSQL Sidecar Service

A critical security vulnerability, SVD-2026-0603 (CVE-2026-20253), has been identified in Splunk Enterprise versions 10.0.0 through 10.0.6 and 10.2.0 through 10.2.3. This flaw allows unauthenticated, remote attackers to create or truncate arbitrary files on the host system by exploiting the PostgreSQL Sidecar Service endpoints. The vulnerability is actively exploited, with public proof-of-concept code available, and has been added to the CISA Known Exploited Vulnerabilities (KEV) list. Successful exploitation can lead to full remote code execution (RCE) as the Splunk user. The vulnerability arises from inadequate authentication controls on the PostgreSQL Sidecar Service endpoints, specifically /v1/postgres/recovery/backup and /v1/postgres/recovery/restore, which are accessible without authentication. It is classified under CWE-306: Missing Authentication for Critical Function and has a CVSS v3.1 base score of 9.8 (Critical). Attackers can exploit the vulnerability by sending crafted HTTP POST requests to the exposed endpoints, allowing them to create or truncate files and potentially execute malicious scripts. Indicators of compromise include unexpected files in directories such as /tmp/ or /opt/splunk/var/run/supervisor/pkg-run/, modified Splunk Python scripts, and unusual outbound connections from Splunk to unknown PostgreSQL servers. The vulnerability aligns with several MITRE ATT&CK techniques, including T1190 (Exploit Public-Facing Application) and T1059 (Command and Scripting Interpreter). Active exploitation of CVE-2026-20253 has been confirmed, and it is likely that both opportunistic cybercriminals and sophisticated threat actors will use this exploit. The affected versions of Splunk Enterprise are 10.2.0 through 10.2.3 and 10.0.0 through 10.0.6, with the issue resolved in versions 10.2.4 and 10.0.7. Organizations are advised to upgrade to fixed versions or disable the PostgreSQL Sidecar Service as a mitigation strategy.
Microsoft showcases AI and Windows developer tools
Winsage
June 2, 2026

Microsoft showcases AI and Windows developer tools

Microsoft's annual developer conference, Build 2026, will take place on June 2-3 in San Francisco and online, featuring a keynote by CEO Satya Nadella. The event is expected to unveil the Copilot "super app," a new reasoning AI model, and a developer-focused Windows 11 experience. The agenda includes topics such as developer tools, cloud platforms, responsible AI practices, and Windows development insights. Attendees can anticipate new software development kits (SDKs), innovative model access patterns, and enhancements to Windows developer ergonomics.
CrowdStrike Falcon: What US Businesses Need to Know Right Now About the Security Platform
Tech Optimizer
May 8, 2026

CrowdStrike Falcon: What US Businesses Need to Know Right Now About the Security Platform

CrowdStrike Falcon is a cloud-native endpoint protection platform (EPP) and extended detection and response (XDR) solution used by many U.S. organizations to combat modern cyber threats such as ransomware and supply chain attacks. It utilizes behavioral analysis, machine learning, and real-time telemetry instead of traditional signature-based detection methods. Falcon features a lightweight agent that operates on various endpoints, collecting telemetry data for analysis. Key modules include Falcon Prevent for blocking malware, Falcon Insight for monitoring endpoint activity, and Falcon OverWatch for managed detection and response services. The platform also offers identity protection and cloud workload security, integrating telemetry from various environments for a comprehensive threat view. Falcon is particularly beneficial for medium to large-sized organizations with dedicated security teams and complex IT infrastructures. However, it may not be suitable for smaller businesses due to its licensing model and operational complexity. Its strengths include rapid deployment, scalability, and advanced detection capabilities, while its limitations involve reliance on proper configuration and cloud connectivity. Competitors include Microsoft Defender for Endpoint and SentinelOne. Organizations considering Falcon should evaluate their security needs, existing infrastructure, and budget, as well as the total cost of ownership.
"The work we’re doing together remains ambitious": OpenAI ends Microsoft exclusivity in a tone that doesn’t match last week’s leaked memo
Winsage
April 27, 2026

“The work we’re doing together remains ambitious”: OpenAI ends Microsoft exclusivity in a tone that doesn’t match last week’s leaked memo

Microsoft and OpenAI have redefined their partnership, ending Microsoft's exclusivity with OpenAI. Microsoft will continue as OpenAI's primary cloud partner, with products launching on Azure first, but OpenAI can now collaborate with other cloud providers if necessary. Key points include: - Microsoft retains its primary cloud partner status, with OpenAI products debuting on Azure unless Microsoft cannot meet capabilities. - OpenAI can distribute products across any cloud platform. - Microsoft's license to OpenAI's intellectual property is non-exclusive and extends through 2032. - Microsoft will no longer share revenue with OpenAI, while OpenAI will continue payments to Microsoft until 2030, capped at a predetermined total. - Microsoft remains a major shareholder in OpenAI. The partnership has faced challenges, including CEO Sam Altman's brief dismissal in late 2023, which displeased Microsoft CEO Satya Nadella. OpenAI's revenue chief acknowledged Microsoft's foundational support while indicating constraints on OpenAI's engagement with enterprise demands. Both companies are committed to ongoing collaboration amidst growing competition in the AI landscape.
"For years, Microsoft's practices have had real financial impact on both public and private organizations" – Microsoft faces new legal challenge over licensing practices
Winsage
April 22, 2026

“For years, Microsoft’s practices have had real financial impact on both public and private organizations” – Microsoft faces new legal challenge over licensing practices

Microsoft is facing a £2 billion lawsuit in the UK, led by competition lawyer Maria Luisa Stasi, representing nearly 60,000 businesses that claim the company imposes excessive charges for using Windows Server on competing cloud platforms. The allegations focus on higher licensing fees for organizations using services like Amazon Web Services, Google Cloud Platform, and Alibaba Cloud compared to those using Microsoft’s Azure. The lawsuit has been allowed to proceed on an opt-out basis by the Tribunal. Microsoft plans to appeal the decision and asserts that its business model promotes competition. The case is part of broader scrutiny of Microsoft's licensing practices, with investigations also initiated by the UK Competition and Markets Authority and the European Commission, as well as inquiries in Brazil, Switzerland, the United States, and Japan.
Fake Huorong Site Delivers ValleyRAT Backdoor in Targeted Malware Campaign
Tech Optimizer
February 24, 2026

Fake Huorong Site Delivers ValleyRAT Backdoor in Targeted Malware Campaign

A cyber operation is targeting users of Huorong Security antivirus software through a typosquatted domain, huoronga[.]com, which mimics the legitimate site huorong.cn. Users who mistakenly visit the counterfeit site may download a file named BR火绒445[.]zip, which contains a trojanized installer that leads to the installation of ValleyRAT, a remote access trojan. The malware employs various techniques to evade detection, including using an intermediary domain for downloads, creating Windows Defender exclusions, and establishing a scheduled task for persistence. The backdoor facilitates activities such as keylogging and credential access while disguising its operations within legitimate processes like rundll32.exe. Attribution points to the Silver Fox APT group, and there has been a significant increase in ValleyRAT samples documented in recent months. Security measures include ensuring software downloads are from the official site and monitoring for specific malicious activities.
Microsoft’s Quiet Exodus: Why Enterprise Developers Are Abandoning Windows for Linux Workstations
Winsage
January 29, 2026

Microsoft’s Quiet Exodus: Why Enterprise Developers Are Abandoning Windows for Linux Workstations

Microsoft developers and enterprise technology leaders are increasingly choosing Linux over Windows for development tasks, driven by performance concerns, workflow inefficiencies, and the rise of cloud-native development. The Windows Subsystem for Linux (WSL) has facilitated this shift by allowing developers to work in a Linux environment while still using Windows. Tools like Docker, Kubernetes, and Terraform, which are primarily designed for Linux, have led to a reevaluation of desktop strategies across various industries. Linux provides direct access to the same kernel and toolchain used in production, reducing discrepancies that can lead to bugs. It typically requires less memory at idle compared to Windows, making it more efficient for developers managing multiple containers or virtual machines. Microsoft has responded by investing in platform-agnostic tools like Visual Studio Code and embracing Linux on its Azure cloud platform, where over 50% of virtual machines run Linux. The introduction of WSL2 has improved compatibility and performance, but it has also highlighted Windows' limitations, leading to frustrations among developers. Security considerations favor Linux due to its open-source nature, allowing for greater customization and auditing. Financially, Linux can be more economical for enterprises due to lower licensing costs and reduced hardware requirements. Organizations that have switched to Linux report significant improvements in build times and overall developer experience. Hybrid strategies are emerging to accommodate developer preferences while ensuring security, with cloud-based development environments gaining traction. The trend toward Linux workstations reflects broader industry movements toward open source and platform independence, as companies adapt to attract and retain technical talent.
ClickHouse: $400 Million Series D Raised, Langfuse Acquisition, And Native Postgres Service Debuted
Tech Optimizer
January 17, 2026

ClickHouse: $400 Million Series D Raised, Langfuse Acquisition, And Native Postgres Service Debuted

ClickHouse has secured 0 million in a Series D funding round led by Dragoneer Investment Group, with participation from investors such as Bessemer Venture Partners, GIC, and others. The funding will support global expansion and product development, focusing on AI infrastructure and application monitoring. ClickHouse currently has over 3,000 customers on its ClickHouse Cloud platform, with an annual recurring revenue growth exceeding 250% year over year. Recent adopters include Capital One, Lovable, and Airwallex, alongside established clients like Meta and Tesla. ClickHouse has acquired Langfuse, an open-source platform for LLM observability, and introduced a native Postgres service for integrating transactional workloads with its analytical engine. The company is also expanding its ecosystem and geographic reach through partnerships, including one with Japan Cloud and collaboration with Microsoft Azure.
Search