cloud platforms Archives

Winsage

May 13, 2026

Windows 11 security update fixes critical Bing and Azure flaws

Microsoft released its May 2026 Patch Tuesday updates for Windows 11, addressing 97 security vulnerabilities across various components, including Windows, Microsoft Office, Azure services, SQL Server, SharePoint, Hyper-V, and .NET. The updates are encapsulated in KB5089549 for Windows 11 versions 24H2 and 25H2, elevating systems to builds 26100.8457 and 26200.8457. Notable vulnerabilities include CVE-2026-32169, a critical flaw in Azure Cloud Shell with a CVSS score of 10.0, and CVE-2026-21536, a critical remote code execution vulnerability in the Microsoft Devices Pricing Program with a CVSS score of 9.8. Other critical vulnerabilities include CVE-2026-32191 and CVE-2026-32194, impacting Microsoft Bing Images, both with CVSS scores of 9.8. The update also addresses multiple Windows privilege escalation vulnerabilities and remote code execution vulnerabilities in Microsoft Office and Excel. Microsoft has warned of upcoming Secure Boot certificate expirations starting in June 2026 and has improved boot reliability related to BitLocker recovery issues. Users can install the updates via Settings → Windows Update, with a system restart required.

Winsage

May 7, 2026

Upwind expands runtime protection to Windows Server VMs

Upwind has expanded its runtime protection and visibility offerings to include Windows Server virtual machines (VMs) on major cloud platforms such as Amazon Web Services, Google Cloud, and Microsoft Azure. This integration applies to Windows Server 2016 and later versions and enhances runtime monitoring and detection workflows. Upwind's Windows Sensor provides visibility into host activities, including process executions, network connections, and DNS requests, while also conducting continuous assessments for vulnerabilities and configuration issues. The telemetry collected aids in real-time detection of potential security threats and supports ongoing vulnerability scanning. The integration of Windows Server VMs into Upwind's Runtime Map, Detections, and Sensor components allows for unified monitoring and risk prioritization across cloud environments. This expansion aims to address the critical need for runtime behavior insights in cloud security, particularly for businesses relying on Windows Server for essential applications.

Winsage

May 6, 2026

The Microsoft/OpenAI breakup: What does it actually mean for Copilot and other AI apps on your Windows 11 PC?

Microsoft's partnership with OpenAI has shifted from an exclusive agreement to a non-exclusive one, allowing OpenAI to offer its products on various cloud platforms while Microsoft remains its primary cloud partner. Microsoft is facing potential challenges, including its worst quarterly performance since 2008 and internal sales cuts due to low interest in its AI offerings. Despite this, CEO Satya Nadella reported that Microsoft 365 Copilot has reached 20 million paid enterprise seats, with user engagement increasing. However, there are concerns about the willingness of Microsoft 365 and Office 365 users to pay for Copilot. The non-exclusive agreement may weaken Microsoft's competitive edge, as OpenAI can now license its models to competitors. Microsoft is developing its own in-house AI models and has made leadership changes within its Copilot division to secure its position in the AI market. The future of Copilot in Windows 11 remains uncertain, but Microsoft continues to innovate with AI features across its platforms.

Winsage

April 22, 2026

“For years, Microsoft’s practices have had real financial impact on both public and private organizations” – Microsoft faces new legal challenge over licensing practices

Microsoft is facing a £2 billion lawsuit in the UK, led by competition lawyer Maria Luisa Stasi, representing nearly 60,000 businesses that claim the company imposes excessive charges for using Windows Server on competing cloud platforms. The allegations focus on higher licensing fees for organizations using services like Amazon Web Services, Google Cloud Platform, and Alibaba Cloud compared to those using Microsoft’s Azure. The lawsuit has been allowed to proceed on an opt-out basis by the Tribunal. Microsoft plans to appeal the decision and asserts that its business model promotes competition. The case is part of broader scrutiny of Microsoft's licensing practices, with investigations also initiated by the UK Competition and Markets Authority and the European Commission, as well as inquiries in Brazil, Switzerland, the United States, and Japan.

AppWizard

April 4, 2026

A Major Fantasy MMORPG Is Finally Coming to PC Game Pass

Xbox Game Pass is expanding its offerings with the addition of Elder Scrolls Online, which will be available on PC Game Pass starting June 2nd. The game will feature Xbox Play Anywhere support, allowing cross-progression between PC and Xbox consoles. ZeniMax has announced a new free, seasonal content model for Elder Scrolls Online, and the game is currently available as a free title on PS Plus Essential until April 6th. The introduction of crossplay and cross-progression is being actively pursued by ZeniMax, addressing a long-standing demand from the community.

Winsage

April 4, 2026

WhatsApp Malware Campaign Uses VBS to Hijack Windows

Microsoft has identified a cyberattack campaign that uses WhatsApp messages to distribute malicious Visual Basic Script (VBS) files targeting Windows systems. First detected in late February 2026, the campaign employs social engineering to trick users into executing the VBS files, which then create hidden directories and disguise themselves as legitimate Windows utilities. The malware downloads additional payloads from cloud platforms like AWS, Tencent Cloud, and Backblaze B2 to establish persistence and escalate privileges. It can bypass User Account Control (UAC), alter registry settings, and install malicious MSI packages, including remote access tools like AnyDesk, to maintain continuous access for attackers.

AppWizard

March 25, 2026

Project Helix will make things easier for game devs, says indie program lead, because “one Xbox build” is all you need

Chris Charla, with 16 years at Xbox and 13 years in the ID@Xbox program, discussed Project Helix, the next-generation Xbox system. It will allow users to play both PC and Xbox games, contrasting with competitors like Sony. At the Game Developers Conference, he highlighted the goal of simplifying game launches, enabling developers to create a single build for Xbox, PC, and cloud platforms. Project Helix will support easy PC and cloud gaming. Charla mentioned that developers currently working on Xbox and PC will benefit from Project Helix, with support for Xbox API, backend integration, and marketing. The system is expected to release in 2027 or 2028, and it may resemble a "gaming PC" running Windows 11.

Winsage

March 6, 2026

Chinese hackers hide malware in Windows and Google Drive to hit targets

Chinese state-sponsored threat actors, specifically a group known as Silver Dragon, have been conducting espionage operations across Southeast Asia and Europe since at least mid-2024. They have targeted government entities in countries such as Russia, Poland, Hungary, Italy, Japan, Myanmar, and Malaysia. Silver Dragon is believed to be affiliated with APT41 and primarily uses phishing emails to initiate attacks, often containing weaponized documents or links. They employ a custom backdoor called GearDoor, which utilizes Google Drive for command-and-control operations, allowing them to exfiltrate stolen intelligence. The group also hijacks legitimate Windows services to load malicious code and uses tools like SSHcmd and Cobalt Strike for post-exploitation activities. Their tactics involve blending malicious activities with normal system operations, making detection difficult and increasing their dwell time within targeted networks.

Tech Optimizer

January 3, 2026

Why AI Workloads Are Fueling a Move Back to Postgres

The database landscape has seen transformative shifts with the rise and fall of various technologies, leading to a resurgence in the adoption of PostgreSQL (Postgres) as a favored database system for modern AI applications. AI workloads have disrupted traditional managed database models, which were designed for predictable workloads, by introducing demands for high parallelism and continuous ingestion of large datasets. Engineering teams face challenges when scaling managed Postgres instances due to IOPS limits, throttling, and latency spikes. Major database vendors are emphasizing PostgreSQL compatibility, recognizing the need for a stable SQL system with strong transactional support. Despite its advantages, traditional managed database models present limitations, including reliance on network storage that introduces latency and IOPS constraints. A new model called Bring Your Own Cloud (BYOC) Postgres is emerging, allowing organizations to control their cloud environments while leveraging managed services, improving performance by colocating data with compute resources. Utilizing local NVMe storage with Postgres can enhance performance by reducing latency and IOPS limitations. Modern Postgres platforms facilitate efficient cloning processes that support parallel experiments in AI development, leading to shorter feedback loops and faster iteration cycles. The robust ecosystem of Postgres allows it to handle diverse workloads, streamlining data management and minimizing operational complexity. Developer velocity is a critical factor in the shift back to Postgres, as it enables rapid feedback and safe testing environments, empowering teams to innovate more effectively.

Tech Optimizer

November 27, 2025

How Letta builds production-ready AI agents with Amazon Aurora PostgreSQL

AI agents benefit from persistent memory, enabling them to recall past interactions and maintain context, which enhances customer experience in scenarios like customer service. The Letta Developer Platform allows developers to create stateful agents with advanced context management features. It supports self-hosting within a virtual private cloud and uses Amazon Aurora PostgreSQL for long-term memory storage. Aurora PostgreSQL offers capabilities such as efficient similarity searches with the pgvector extension, sub-second query latency, and dynamic storage scaling. Letta operates as a persistent service, allowing agents to function independently and scale horizontally using Kubernetes. The platform supports multi-tenancy and includes enterprise features for security and monitoring. To set up an Aurora Serverless cluster for Letta, users must create a database on Amazon RDS, configure security group access, and install the pgvector extension. Letta connects to Aurora using a PostgreSQL connection string. After establishing the connection, users can create agents, send messages, and view agent states and conversation histories stored in Aurora. Letta organizes data in 42 tables, including those for agents, messages, and memory blocks. Users can explore the database schema and examine the structure of stored messages and embeddings. Finally, it is recommended to delete the Aurora cluster and associated resources after completing the integration to avoid charges.