NewApp Digest
search bot

code

Meta pauses controversial employee-tracking program after security review
Tech Optimizer
June 23, 2026

Meta pauses controversial employee-tracking program after security review

Meta has suspended its employee-tracking program after an internal security review revealed excessive accessibility to sensitive data collected from staff laptops. The program, part of the Model Capability Initiative (MCI), aimed to gather detailed information on employee interactions with work devices, including mouse movements, click locations, keystrokes, and screen content. Concerns arose regarding the privacy and security of the collected data, which included AI prompts, transcriptions, private conversations, and performance-related information. The initiative faced backlash, particularly after an engineer criticized "laptop surveillance," leading to a petition for its termination. The monitoring software was deployed on US workers’ laptops without an opt-out option, capturing comprehensive behavioral datasets. The situation highlighted significant legal and regulatory challenges, as well as the risks associated with managing sensitive data. Access controls, data minimization, and retention policies are critical to mitigate potential breaches.
Active Exploitation of Critical CVE-2026-20253 in Splunk Enterprise: Unauthenticated RCE via PostgreSQL Sidecar Service
Tech Optimizer
June 23, 2026

Active Exploitation of Critical CVE-2026-20253 in Splunk Enterprise: Unauthenticated RCE via PostgreSQL Sidecar Service

A critical security vulnerability, SVD-2026-0603 (CVE-2026-20253), has been identified in Splunk Enterprise versions 10.0.0 through 10.0.6 and 10.2.0 through 10.2.3. This flaw allows unauthenticated, remote attackers to create or truncate arbitrary files on the host system by exploiting the PostgreSQL Sidecar Service endpoints. The vulnerability is actively exploited, with public proof-of-concept code available, and has been added to the CISA Known Exploited Vulnerabilities (KEV) list. Successful exploitation can lead to full remote code execution (RCE) as the Splunk user. The vulnerability arises from inadequate authentication controls on the PostgreSQL Sidecar Service endpoints, specifically /v1/postgres/recovery/backup and /v1/postgres/recovery/restore, which are accessible without authentication. It is classified under CWE-306: Missing Authentication for Critical Function and has a CVSS v3.1 base score of 9.8 (Critical). Attackers can exploit the vulnerability by sending crafted HTTP POST requests to the exposed endpoints, allowing them to create or truncate files and potentially execute malicious scripts. Indicators of compromise include unexpected files in directories such as /tmp/ or /opt/splunk/var/run/supervisor/pkg-run/, modified Splunk Python scripts, and unusual outbound connections from Splunk to unknown PostgreSQL servers. The vulnerability aligns with several MITRE ATT&CK techniques, including T1190 (Exploit Public-Facing Application) and T1059 (Command and Scripting Interpreter). Active exploitation of CVE-2026-20253 has been confirmed, and it is likely that both opportunistic cybercriminals and sophisticated threat actors will use this exploit. The affected versions of Splunk Enterprise are 10.2.0 through 10.2.3 and 10.0.0 through 10.0.6, with the issue resolved in versions 10.2.4 and 10.0.7. Organizations are advised to upgrade to fixed versions or disable the PostgreSQL Sidecar Service as a mitigation strategy.
Millisecond Latency at Scale: Why Our ML Feature Store Runs on Snowflake Postgres
Tech Optimizer
June 23, 2026

Millisecond Latency at Scale: Why Our ML Feature Store Runs on Snowflake Postgres

Organizations are consolidating their fragmented database environments with Snowflake Postgres, phasing out outdated systems and simplifying multivendor setups without extensive code rewrites. Ericsson migrated four legacy databases to Snowflake Postgres, achieving a 99% reduction in data processing time. SimCorp's transition to Snowflake Postgres resulted in a tenfold increase in disk operation speeds. Sigma Computing provides real-time analytics using Snowflake Postgres, eliminating the need for external systems. BlueCloud supports low-latency transactional workloads and analytics on a single platform. Superblocks enables developers to create full-stack applications using Snowflake CoCo, leveraging SQL tools against live data. Snowflake Postgres is approximately four times faster than Databricks Lakebase and has a 99.95% published uptime SLA. It operates on Postgres 18 and accommodates up to 64 TB of storage, surpassing Lakebase's 16 TB limit. Snowflake Postgres simplifies management with in-place major version upgrades and supports standard logical replication, enhancing flexibility for data movement and integration.
The database that refused to die: How Postgres survived its own creators
Tech Optimizer
June 22, 2026

The database that refused to die: How Postgres survived its own creators

Postgres, originally developed by Michael Stonebraker in the early 1980s, is an open-source database system that evolved from Ingres. It was designed to handle complex data types and introduced user-defined data types, operators, and functions, leading to the support for abstract data types (ADTs). The initial commercialization of Postgres occurred through a startup named Illustra, later acquired by Informix. In 1995, graduate students Andrew Yu and Jolly Chen revived Postgres, transitioning it from QUEL to SQL, resulting in Postgre95, which evolved into PostgreSQL. Today, Postgres is one of the most popular database systems globally, known for its extensibility and high code quality. However, it currently lacks features like file-level encryption (TDE), which are standard in commercial systems, relying instead on the operating system for encryption. Efforts to implement TDE have faced challenges due to the complexity of required code changes.
Pixel Audio Memory could upgrade song ID with new note-taking tool
AppWizard
June 22, 2026

Pixel Audio Memory could upgrade song ID with new note-taking tool

Google is expanding its music recognition capabilities with a new feature called Audio Memory, which will enhance the existing Now Playing functionality. Audio Memory will automatically identify songs using a local database, and if a song isn't recognized, a digital fingerprint may be sent to Google for a secure cloud search. Background conversations and audio will remain private and not be transmitted to Google. Users will also have the option to manually identify songs via a cloud search. The onboarding text suggests that Audio Memory could track both music and important conversations, indicating its potential as an AI note-taker. Early interface glimpses show that users will be able to identify ambient music and songs from other applications, although details on conversation tracking are still unclear. The project is codenamed "blueflax," and while features are in development, not all may be included in the final release.
Google Photos may have a new trick to make your pictures look dramatically different
AppWizard
June 22, 2026

Google Photos may have a new trick to make your pictures look dramatically different

Google Photos is set to introduce a new feature called Moods in version 7.81 of the app, which utilizes artificial intelligence for photo editing. Moods offers eight distinct templates: Airy Minimalist, Crisp 35mm, 2000’s Cinema, Rich Textures, Pink Digicam, Retro Contrast, Night Lights, and 2000’s Night, each designed to evoke specific visual styles. The feature aims to provide a more personalized editing experience by analyzing images individually rather than applying uniform filters. Although Moods is not yet operational, it represents a shift towards a more AI-driven editing experience in Google Photos. An APK teardown indicates potential features, but there is no guarantee they will be publicly released.
MSYS2 And The No-Fuss Way To Get More GNU Into Your Windows
Winsage
June 22, 2026

MSYS2 And The No-Fuss Way To Get More GNU Into Your Windows

The Windows desktop experience has a streamlined interface, but its command line interface (CLI) offerings, particularly the cmd.exe shell, have been criticized for lacking the features found in UNIX/BSD/Linux environments. Microsoft’s transition to PowerShell has disappointed users who prefer a more traditional CLI experience. Despite Windows NT operating systems being POSIX compliant, they have historically lacked a suitable shell. MSYS2 provides a solution by offering a Linux-like experience with a Bash shell and the pacman package manager, allowing users to run shell scripts and access various tools. However, binaries compiled in MSYS2 may depend on shared libraries not included in the Windows system path. Upon installation, users can choose from different terminal options, with the UCRT terminal recommended for its usability. MSYS2 facilitates a streamlined development workflow, enabling the use of familiar tools across multiple platforms, but it does not achieve perfect integration within Windows and has some limitations, such as issues with stdout output in Bash.
Windows 11 26H2 arrives as a tiny unlock, not a massive download
Winsage
June 22, 2026

Windows 11 26H2 arrives as a tiny unlock, not a massive download

Microsoft has confirmed the release of Windows 11 26H2, scheduled for Fall 2026. This update focuses on improving the update experience for businesses and IT professionals by streamlining maintenance processes. Windows 11 26H2 will be delivered as an enablement package, activating pre-existing code on eligible devices, ensuring a swift installation with minimal disruption. It will unlock features from earlier versions, specifically Windows 11 24H2 and 25H2, allowing a seamless transition with minimal operational downtime. The update is currently available to Windows Insiders and emphasizes a predictable, low-disruption experience for IT departments. Key advantages include a streamlined installation process, minimal user disruption, no need for complete reinstallation, consistent security and quality updates, and uniform compatibility checks. The specific release date has not been announced, but it will arrive in the latter half of 2026. The hardware requirements remain the same as previous versions: a minimum of 4GB of RAM, 64GB of storage, and a 1GHz 64-bit dual-core processor.
Search