NewApp Digest
search bot

code

Microsoft Confirms Windows 11 26H2 Update for x86-64 PCs
Winsage
June 23, 2026

Microsoft Confirms Windows 11 26H2 Update for x86-64 PCs

Microsoft has confirmed the release of the Windows 11 update version 26H2, designed for PCs with x86-64 processors from Intel and AMD. Devices with Qualcomm Snapdragon Elite and NVIDIA RTX Spark processors will receive a separate update. Earlier this year, Windows 11 26H1 was introduced for Windows-on-Arm devices. Windows 11 26H2 is a minor update that shares the same code base as version 25H2, allowing for a seamless transition without a complete system file replacement. The update process is straightforward and will consolidate security and quality updates. Microsoft will provide security updates for Windows 11 versions 24H2, 25H2, and 26H2 for two years. Windows 11 Enterprise LTSC editions will offer stability by locking onto a specific kernel code base for security updates until a future date.
Meta pauses controversial employee-tracking program after security review
Tech Optimizer
June 23, 2026

Meta pauses controversial employee-tracking program after security review

Meta has suspended its employee-tracking program after an internal security review revealed excessive accessibility to sensitive data collected from staff laptops. The program, part of the Model Capability Initiative (MCI), aimed to gather detailed information on employee interactions with work devices, including mouse movements, click locations, keystrokes, and screen content. Concerns arose regarding the privacy and security of the collected data, which included AI prompts, transcriptions, private conversations, and performance-related information. The initiative faced backlash, particularly after an engineer criticized "laptop surveillance," leading to a petition for its termination. The monitoring software was deployed on US workers’ laptops without an opt-out option, capturing comprehensive behavioral datasets. The situation highlighted significant legal and regulatory challenges, as well as the risks associated with managing sensitive data. Access controls, data minimization, and retention policies are critical to mitigate potential breaches.
Active Exploitation of Critical CVE-2026-20253 in Splunk Enterprise: Unauthenticated RCE via PostgreSQL Sidecar Service
Tech Optimizer
June 23, 2026

Active Exploitation of Critical CVE-2026-20253 in Splunk Enterprise: Unauthenticated RCE via PostgreSQL Sidecar Service

A critical security vulnerability, SVD-2026-0603 (CVE-2026-20253), has been identified in Splunk Enterprise versions 10.0.0 through 10.0.6 and 10.2.0 through 10.2.3. This flaw allows unauthenticated, remote attackers to create or truncate arbitrary files on the host system by exploiting the PostgreSQL Sidecar Service endpoints. The vulnerability is actively exploited, with public proof-of-concept code available, and has been added to the CISA Known Exploited Vulnerabilities (KEV) list. Successful exploitation can lead to full remote code execution (RCE) as the Splunk user. The vulnerability arises from inadequate authentication controls on the PostgreSQL Sidecar Service endpoints, specifically /v1/postgres/recovery/backup and /v1/postgres/recovery/restore, which are accessible without authentication. It is classified under CWE-306: Missing Authentication for Critical Function and has a CVSS v3.1 base score of 9.8 (Critical). Attackers can exploit the vulnerability by sending crafted HTTP POST requests to the exposed endpoints, allowing them to create or truncate files and potentially execute malicious scripts. Indicators of compromise include unexpected files in directories such as /tmp/ or /opt/splunk/var/run/supervisor/pkg-run/, modified Splunk Python scripts, and unusual outbound connections from Splunk to unknown PostgreSQL servers. The vulnerability aligns with several MITRE ATT&CK techniques, including T1190 (Exploit Public-Facing Application) and T1059 (Command and Scripting Interpreter). Active exploitation of CVE-2026-20253 has been confirmed, and it is likely that both opportunistic cybercriminals and sophisticated threat actors will use this exploit. The affected versions of Splunk Enterprise are 10.2.0 through 10.2.3 and 10.0.0 through 10.0.6, with the issue resolved in versions 10.2.4 and 10.0.7. Organizations are advised to upgrade to fixed versions or disable the PostgreSQL Sidecar Service as a mitigation strategy.
Millisecond Latency at Scale: Why Our ML Feature Store Runs on Snowflake Postgres
Tech Optimizer
June 23, 2026

Millisecond Latency at Scale: Why Our ML Feature Store Runs on Snowflake Postgres

Organizations are consolidating their fragmented database environments with Snowflake Postgres, phasing out outdated systems and simplifying multivendor setups without extensive code rewrites. Ericsson migrated four legacy databases to Snowflake Postgres, achieving a 99% reduction in data processing time. SimCorp's transition to Snowflake Postgres resulted in a tenfold increase in disk operation speeds. Sigma Computing provides real-time analytics using Snowflake Postgres, eliminating the need for external systems. BlueCloud supports low-latency transactional workloads and analytics on a single platform. Superblocks enables developers to create full-stack applications using Snowflake CoCo, leveraging SQL tools against live data. Snowflake Postgres is approximately four times faster than Databricks Lakebase and has a 99.95% published uptime SLA. It operates on Postgres 18 and accommodates up to 64 TB of storage, surpassing Lakebase's 16 TB limit. Snowflake Postgres simplifies management with in-place major version upgrades and supports standard logical replication, enhancing flexibility for data movement and integration.
The database that refused to die: How Postgres survived its own creators
Tech Optimizer
June 22, 2026

The database that refused to die: How Postgres survived its own creators

Postgres, originally developed by Michael Stonebraker in the early 1980s, is an open-source database system that evolved from Ingres. It was designed to handle complex data types and introduced user-defined data types, operators, and functions, leading to the support for abstract data types (ADTs). The initial commercialization of Postgres occurred through a startup named Illustra, later acquired by Informix. In 1995, graduate students Andrew Yu and Jolly Chen revived Postgres, transitioning it from QUEL to SQL, resulting in Postgre95, which evolved into PostgreSQL. Today, Postgres is one of the most popular database systems globally, known for its extensibility and high code quality. However, it currently lacks features like file-level encryption (TDE), which are standard in commercial systems, relying instead on the operating system for encryption. Efforts to implement TDE have faced challenges due to the complexity of required code changes.
Pixel Audio Memory could upgrade song ID with new note-taking tool
AppWizard
June 22, 2026

Pixel Audio Memory could upgrade song ID with new note-taking tool

Google is expanding its music recognition capabilities with a new feature called Audio Memory, which will enhance the existing Now Playing functionality. Audio Memory will automatically identify songs using a local database, and if a song isn't recognized, a digital fingerprint may be sent to Google for a secure cloud search. Background conversations and audio will remain private and not be transmitted to Google. Users will also have the option to manually identify songs via a cloud search. The onboarding text suggests that Audio Memory could track both music and important conversations, indicating its potential as an AI note-taker. Early interface glimpses show that users will be able to identify ambient music and songs from other applications, although details on conversation tracking are still unclear. The project is codenamed "blueflax," and while features are in development, not all may be included in the final release.
Google Photos may have a new trick to make your pictures look dramatically different
AppWizard
June 22, 2026

Google Photos may have a new trick to make your pictures look dramatically different

Google Photos is set to introduce a new feature called Moods in version 7.81 of the app, which utilizes artificial intelligence for photo editing. Moods offers eight distinct templates: Airy Minimalist, Crisp 35mm, 2000’s Cinema, Rich Textures, Pink Digicam, Retro Contrast, Night Lights, and 2000’s Night, each designed to evoke specific visual styles. The feature aims to provide a more personalized editing experience by analyzing images individually rather than applying uniform filters. Although Moods is not yet operational, it represents a shift towards a more AI-driven editing experience in Google Photos. An APK teardown indicates potential features, but there is no guarantee they will be publicly released.
MSYS2 And The No-Fuss Way To Get More GNU Into Your Windows
Winsage
June 22, 2026

MSYS2 And The No-Fuss Way To Get More GNU Into Your Windows

The Windows desktop experience has a streamlined interface, but its command line interface (CLI) offerings, particularly the cmd.exe shell, have been criticized for lacking the features found in UNIX/BSD/Linux environments. Microsoft’s transition to PowerShell has disappointed users who prefer a more traditional CLI experience. Despite Windows NT operating systems being POSIX compliant, they have historically lacked a suitable shell. MSYS2 provides a solution by offering a Linux-like experience with a Bash shell and the pacman package manager, allowing users to run shell scripts and access various tools. However, binaries compiled in MSYS2 may depend on shared libraries not included in the Windows system path. Upon installation, users can choose from different terminal options, with the UCRT terminal recommended for its usability. MSYS2 facilitates a streamlined development workflow, enabling the use of familiar tools across multiple platforms, but it does not achieve perfect integration within Windows and has some limitations, such as issues with stdout output in Bash.
Search