command Archives

Winsage

May 1, 2026

Microsoft releases first big update after Nadella’s vow to ‘win back fans’

Microsoft released a non-security update on April 30 aimed at enhancing Windows stability and performance, particularly improving Windows Explorer functionality. The update improves the reliability of explorer.exe processes, enhances sign-in processes, interactions with taskbar menus, and unpinning items from Quick Access. It optimizes startup application performance and storage performance, raising the maximum FAT32 format size limit from 32GB to 2TB. Additional reliability improvements were made to Windows Hello, the Microsoft Store, and the taskbar system tray. The update also introduces Enterprise State Roaming (ESR) for device transitions, policy-based removal of preinstalled Microsoft applications, and enhanced security for batch files.

Tech Optimizer

May 1, 2026

Ghost: A Database for Our Times?

Ghost, developed by ghost.build, is an "agent-first" Postgres database platform designed for AI-related applications, allowing developers and AI agents to create, fork, inspect, query, manipulate, and delete databases easily. It is free to use and hosted on Ghost’s Cloud infrastructure, making it suitable for testing, prototyping, and disposable database environments. Users can create databases on demand, execute SQL queries, and discard them when finished, contrasting with traditional managed databases. Ghost integrates with AI tools like Codex and Claude Code, providing direct database management capabilities through its MCP server. To install Ghost, users need a supported coding agent and a GitHub account. Installation commands differ for Linux, macOS, and Windows. After installation, users can verify the Ghost MCP server and interact with it through their coding agents. Examples of using Ghost include creating a sales data database, utilizing Ghost CLI commands, and experimenting with databases through AI agents. Ghost allows for rapid database manipulation and is ideal for proofs of concept and experimentation, although caution is advised before using it for production data.

Winsage

May 1, 2026

Microsoft brings a Linux-style window trick to Windows 11 via PowerToys, and I can’t go back

Microsoft's PowerToys version 0.99 introduces two new tools: Grab And Move and Power Display, along with enhancements to the Command Palette Dock. Grab And Move allows users to reposition application windows by holding the Alt key and dragging anywhere on the window, facilitating easier window management. Users can customize the activation key and toggle the feature off during gaming sessions. There are also options to exclude specific applications from using this feature. Power Display enables users to manage monitor settings directly from the system tray, including brightness, contrast, volume, rotation, and color temperature adjustments. It supports multi-monitor setups with DDC/CI standards and includes a Profiles option for saving specific monitor settings. The Command Palette Dock now features a compact mode and customization options for pinned commands, improving user accessibility and screen space utilization.

AppWizard

May 1, 2026

Legendary Deus Ex and Thief director Warren Spector is back with a new game — it’s a stealth-heist-em-up called Thick as Thieves, and even the price is a steal at just five bucks on Steam

Thick as Thieves, directed by Warren Spector, will be released on May 20, 2026, at a price of .99 / £4.99. The game features a fictional Scottish city with solo and cooperative heist missions, two expansive maps, 16 unique missions, and six pieces of customizable gear. Players can expect around four hours of gameplay initially, with potential for extended playthroughs due to the dynamic nature of the maps. The developers plan to enhance the game based on player feedback and it is available for wishlist addition on Steam.

AppWizard

May 1, 2026

New ROG Xbox Ally Updates: Docking Improvements, Auto SR Preview, Collective Library, Enhanced Vibration, and More

Six months ago, ASUS and AMD launched the ROG Xbox Ally and ROG Xbox Ally X in 45 countries, combining Xbox capabilities with Windows 11 in a portable format. Player feedback has led to continual updates, optimizing hundreds of games for handheld play and introducing features like Default Game Profiles and expanded Xbox mode. Recent updates include automatic gameplay transition to TV when docked, support for HDR10 and Variable Refresh Rate on certain docks, a Display Widget for adjusting settings via the Game Bar, improved controller pairing, and the Gamepad Cursor feature for non-controller supported applications. Automatic Super Resolution is now in preview for Xbox Insiders on the ROG Xbox Ally X, enhancing visual quality. The Xbox Wireless Headset now supports Bluetooth LE Audio for reduced latency and improved battery life. The Xbox PC app has been revamped to consolidate games from various storefronts into one library. Over 1,000 PC games are now compatible with handheld play, and features like Default Game Profiles and Advanced Shader Delivery have been introduced. Popular games supporting these features include Ninja Gaiden 4, Grounded 2, and others, with more titles expected in the future.

Tech Optimizer

May 1, 2026

Backstage Ditches Postgres for Databricks Lakebase

The divide between operational and analytical databases is diminishing, as evidenced by Databricks integrating Spotify's Backstage with its Lakebase, transitioning from PostgreSQL to a unified data platform. Lakebase now offers a serverless PostgreSQL interface within Databricks, allowing Backstage to operate without awareness of the underlying changes. The integration involved updating configurations and addressing authentication challenges using OAuth JWTs. The integration transforms the database development lifecycle by enabling near-instant database branching through Lakebase's copy-on-write architecture, allowing developers to focus on testing changes rather than safety. Branching creates a pointer to existing data, making the operation instantaneous. Point-in-Time Recovery (PITR) allows for quick restoration of data, demonstrated by a recovery process that took less than four seconds. The goal is to integrate database branching into developer workflows seamlessly, making it automatic. This change could enhance developer productivity by allowing live data testing from the start, eliminating the need for mock objects, and resolving common issues related to staging environments. The traditional constraints of slow and costly database copies will become obsolete, prompting teams to reconsider how much time they spend on workarounds for now-nonexistent constraints.

AppWizard

April 30, 2026

Brazilian LofyGang Resurfaces After Three Years With Minecraft LofyStealer Campaign

A Brazilian cybercriminal group known as LofyGang has re-emerged after three years, targeting Minecraft players with malware called LofyStealer, also known as GrabBot. This malware is disguised as a Minecraft hack named 'Slinky' and uses the official game icon to attract young users. The group has been active since late 2021 and previously leaked thousands of Minecraft accounts. The attack begins with the 'Slinky' hack, which deploys LofyStealer (identified as "chromelevator.exe") to harvest sensitive information from web browsers, including cookies, passwords, and credit card information, sending this data to a command-and-control server. ZenoX reports a shift in LofyGang's tactics from JavaScript supply chain attacks to a malware-as-a-service model, offering both free and premium tiers. Cybercriminals are increasingly exploiting trusted platforms like GitHub to distribute malware through bogus repositories and various deceptive tactics, including fake security alerts and counterfeit accounts. This trend highlights a strategy focused on volume targeting rather than precision, prompting cybersecurity experts to prioritize threats from GitHub-hosted downloads that appear legitimate.

AppWizard

April 30, 2026

LofyStealer Targets Minecraft Players via Node.js Loader and Browser Injection

Minecraft players are being targeted by a deceptive hacking tool called “Slinky,” which is actually an infostealer known as LofyStealer linked to the Brazilian cybercrime group LofyGang. The malware uses a Node.js-based loader and a C++ payload to extract sensitive browser data, disguising itself as a Minecraft hack. It primarily targets younger players who may unknowingly execute it. The malware operates through a two-stage architecture, with a 53.5 MB loader binary that injects a smaller 1.4 MB payload into browser processes, bypassing detection methods. It collects sensitive information such as cookies, passwords, and credit card details, compressing and encoding the data for exfiltration. The command-and-control (C2) infrastructure is hosted in Brazil, and the malware's design reflects advanced compilation techniques. The campaign is attributed to LofyGang, which has evolved into a more professional entity, posing severe risks to players who download cheats and cracked tools. Indicators of compromise include a specific C2 IP address and associated endpoints.

AppWizard

April 30, 2026

LofyStealer Uses Node.js Loader Against Minecraft Gamers

Cybersecurity threat hunters have discovered an active infostealer campaign targeting the gaming community, involving malware called LofyStealer (or GrabBot) that disguises itself as a Minecraft hack named “Slinky.” The attackers use the official game icon to trick young gamers into executing the malware. The Brazilian cybercrime group LofyGang has enhanced its technical capabilities, utilizing a sophisticated two-stage modular architecture. The initial stage features a 53.5 MB loader file named load.exe, which is a Node.js runtime environment that obscures malicious signatures. The loader connects to the attacker’s server and decrypts a 1.4 MB C++ payload, chromelevator.exe, which targets eight web browsers to extract sensitive information like cookies and passwords. The stolen data is compressed, encrypted, and sent to the attacker’s server. LofyGang has evolved into a Malware-as-a-Service platform, offering a web panel for operators to monitor victims and generate custom executables. The campaign highlights the increasing threats to the gaming community, with advanced evasion techniques being employed by cybercriminals. Security professionals are advised to monitor network traffic and conduct audits for suspicious activities.

AppWizard

April 30, 2026

Minecraft Players Targeted by LofyStealer Using Node.js Loader and In-Memory Browser Injection

A new infostealer malware called LofyStealer is targeting the gaming community, particularly Minecraft players, by disguising itself as a cheat tool named “Slinky.” It employs a two-stage attack to extract sensitive information from eight major web browsers, including Chrome and Firefox, while evading detection by security software. The malware siphons off cookies, saved passwords, payment card information, and session tokens. Researchers at Zenox.ai identified LofyStealer, linking it to the Brazilian cybercrime group LofyGang, which has been active since October 2022. The malware uses social engineering tactics to appear legitimate and operates as a Malware-as-a-Service platform, offering both Free and Premium tiers to buyers. Its technical sophistication is evident in its method of in-memory browser injection, which allows it to bypass security defenses. The stolen data is compressed and sent to a command-and-control server. Users are advised to avoid downloading unofficial game mods and enable multi-factor authentication to reduce the risk of credential theft. Security teams should monitor for specific behavioral indicators related to the malware's operations.