compliance Archives

Winsage

August 13, 2026

Microsoft begins unified Copilot app rollout: Reveals major plan to merge Copilot and Microsoft 365 Copilot across all platforms, along with updated branding

Microsoft is unifying its Copilot applications by merging the consumer and productivity versions into a single app branded as "Copilot." This change aims to simplify user experience and will feature a cohesive design and improved navigation. Certain features will be retired, including: - Group Chat: All threads, messages, and images will not carry forward after August 18, 2026. Users should manually copy or download any content they wish to retain. - Podcasts: The Podcasts feature will be fully retired on August 18, 2026, after which users will be unable to create or access podcasts within Copilot. Individual podcast files can be downloaded before the retirement date. - Deep Research: This feature will be retired for consumer users starting August 18, 2026, although existing content will remain accessible. The unified app will be available for both personal and work/school accounts, with security measures in place to protect organizational data. All existing Copilot data, except for the phased-out features, will transition automatically to the new app. The rollout will begin today in phases, starting with mobile users, followed by updates for Windows and macOS by mid-September. The complete rollout schedule includes: - Mid-August 2026: Global rollout begins for mobile and web apps; early-access opt-in opens for Windows and Mac apps. - Late August 2026: Standard rollout of the URL redirect begins. - Mid-September 2026: Global rollout for Windows and Mac apps commences. - Late September 2026: Deferred rollout of the URL redirect begins for the web app.

Tech Optimizer

August 13, 2026

Enforcing TLS and managing certificate rotation for RDS and Amazon Aurora PostgreSQL

When an Amazon RDS certificate expires and the application’s trust store is outdated, it can cause connection failures. AWS announces Certificate Authorities (CA) rotation events in advance and provides management tools, but a lack of proactive certificate lifecycle management can lead to unplanned downtime. Default configurations for RDS and Amazon Aurora allow both encrypted and unencrypted PostgreSQL connections, which can expose sensitive data if not properly configured. AWS manages the Certificate Authority infrastructure and provisions server certificates, while users are responsible for enforcing TLS usage and managing the rotation lifecycle. Amazon RDS employs a managed Certificate Authority hierarchy that issues server certificates for each database instance, supporting TLS 1.2 and TLS 1.3. The solution to enforce TLS includes server-side enforcement with the rds.force_ssl parameter, client-side verification with the sslmode=verify-full parameter, and automated lifecycle monitoring using Amazon EventBridge, AWS Lambda, and Amazon CloudWatch. Prerequisites for implementing this solution include an AWS account with an Amazon RDS for PostgreSQL or Amazon Aurora PostgreSQL instance, IAM permissions for relevant services, a compatible PostgreSQL client, familiarity with Amazon RDS parameter groups, and the openssl CLI. The rds.force_ssl parameter controls whether Amazon RDS rejects non-SSL connections, with defaults varying by PostgreSQL version.

AppWizard

August 12, 2026

Apple restores Telegram after child abuse material ban; Gram token recovers

Apple has reinstated Telegram to its App Store after a temporary removal due to the discovery of child sexual abuse material. Telegram responded by removing the offending content and banning the user responsible, which helped recover the value of the Gram token that had initially dipped by approximately 6.4%. The incident underscores the scrutiny messaging platforms face regarding illegal content, with Telegram currently under scrutiny in Russia, France, and Australia for alleged facilitation of illegal activities and extremist content.

BetaBeacon

August 11, 2026

Aptoide Games Joins Google Play: First Rival Android Store in Over Decade

The Play Catalog Access Program was implemented on July 22, 2026, as a result of a court order after Google lost a lawsuit filed by Epic Games for illegally monopolizing Android app distribution and in-app billing. The program allows enrolled stores, such as Aptoide Games, to access Google Play's app catalog and offer users the ability to install apps through Google Play's infrastructure, maintaining security and service fees.

Winsage

August 10, 2026

Azure Arc-Enabled ESUs for Windows Server 2016 Now Available

Microsoft is offering Extended Security Updates (ESUs) for Windows Server 2016, which will provide critical security patches until January 2030, after the end of extended support on January 12, 2027. Organizations can enroll their Windows Server 2016 instances via Azure Arc to receive these updates without migrating to Azure. The ESUs are available through a pay-as-you-go pricing model, allowing flexibility for on-premises servers and other cloud platforms. By using Azure Arc, organizations gain access to Azure management tools for improved visibility and compliance. IT administrators should connect eligible systems to Azure Arc to manage ESU enrollment and compliance effectively. ESUs are intended as a temporary solution while businesses modernize applications and plan migrations to supported platforms.

AppWizard

August 10, 2026

Third-party app stores are rolling out in Google Play, but there’s only one right now

Google Play has introduced its first third-party app store, Aptoide, following a ruling from a long-standing antitrust lawsuit involving Epic Games. Users in the U.S. can now download Aptoide directly from the Google Play Store, which reflects the court's mandate after Epic's victory in 2023. The ruling included remedies such as reducing developer fees, allowing apps to be mirrored across different app stores, permitting alternative payment systems, and mandating the inclusion of third-party app stores in Google Play. Aptoide offers a user-friendly installation process without sideloading warnings and claims to have access to 1.9 million apps and 295,000 games. Developers can opt out of sharing their apps with Aptoide, but many may choose to use this additional distribution channel.

AppWizard

August 10, 2026

Australians must now prove their age to buy R18+ games on the Xbox store

Microsoft will require users to verify their age when purchasing games rated R18+ on Xbox and Microsoft Store starting in August 2026 to comply with Australian regulations.

AppWizard

August 5, 2026

Developers: Beware of Ad Libraries that Betray Your Users’ Location

Advertising companies provide software development kits (SDKs) for mobile app monetization, which often automatically transmit users' location data to ad systems and location data brokers, raising privacy concerns. Many developers and users may be unaware of this data sharing. When developers allow SDKs to collect location data, it poses risks beyond targeted ads, including potential misuse by agencies like ICE and global surveillance. Location data brokers harvest precise movements of individuals, often without their consent, through mobile applications. Some apps directly collaborate with data brokers, while others leak data through advertising SDKs during real-time bidding (RTB) auctions. An incident in 2025 revealed that many apps unknowingly contributed to a location data broker's database. Developers must understand their SDKs' location-sharing practices to mitigate risks. Advertising SDKs can collect location data automatically once users grant permission, without specific permissions for the SDKs themselves. Precise location data can be collected when apps have location permissions, leading to potential privacy violations. Several SDKs have been identified as collecting location data by default, increasing the risk of unintentional data leaks. The Electronic Frontier Foundation (EFF) found that four advertising SDKs collect users' location data by default when location permissions are granted. InMobi encourages location sharing for higher revenue, while BidMachine updated its documentation after EFF's inquiry, confirming precise location data collection. Verve's SDK also collects location data by default but presents a cautious narrative in its Play Store guidance. Huawei's SDK recommends obtaining location permissions to enhance revenue, with default location sharing occurring if permissions are granted. Location data can be shared without users' knowledge or meaningful consent, complicating informed consent issues. The focus on four SDKs does not imply that others adequately protect location data, as many have faced criticism for similar practices. Studies indicate that SDKs often encourage increased data collection through design and documentation, leading to minimal control for developers over data transmission. The EFF's analysis highlights that advertising SDKs incentivize location data sharing through default settings and unclear documentation. Developers should assess third-party SDKs and disable unnecessary data collection. Regulators must hold developers accountable for unlawful data sharing, while legislators should enact laws to protect location privacy and address online behavioral advertising, which drives data tracking.

Tech Optimizer

August 4, 2026

Automated PII redaction for Amazon RDS for PostgreSQL audit logs

The article discusses a serverless pipeline for creating an irreversibly redacted and queryable archive of Amazon RDS for PostgreSQL audit logs. It sanitizes sensitive information, such as Social Security numbers, credit card details, and email addresses, before storing the clean logs in Amazon S3, which can be queried using Amazon Athena. The deployment process is facilitated by a single AWS CloudFormation template. The challenge is that pgAudit logs sensitive data in cleartext to Amazon CloudWatch Logs, which poses compliance risks under regulations like GDPR and HIPAA. While CloudWatch Logs Data Protection offers reversible masking of PII, this is insufficient for compliance needs requiring permanent separation of PII from audit evidence. The proposed pipeline creates an irreversibly redacted copy stored in Amazon S3, ensuring original values cannot be restored. The deployment requires an active AWS account with specific permissions, AWS CLI v2, a compatible AWS region, and confirmation of service quotas. The CloudFormation template has four main parameters for deployment, including ProjectName, DBInstanceClass, DBAllocatedStorage, and EnvironmentType, with sensible defaults provided. Three deployment options are available: via the AWS console, AWS CLI, or a deploy script. After deployment, users can generate test data, trigger the redaction pipeline, and verify results in Athena. The process includes steps to create a PostgreSQL table, insert records with PII, run queries, and monitor the execution of the redaction pipeline. The article emphasizes that unredacted PII remains in the source CloudWatch Logs, recommending enabling CloudWatch Logs Data Protection for added security. To clean up resources and avoid charges, users must empty the S3 buckets and delete the stack. Cost considerations for the pipeline include infrastructure costs and the expense of achieving irreversibility.

Winsage

August 3, 2026

Microsoft warns Windows 11 Insiders of crucial mandatory upcoming deadline

Microsoft is updating Secure Boot certificates for Windows 11 PCs, as the previous certificates are 15 years old and nearing expiration. Users can check their certificate status easily. An advisory was issued in early September regarding changes for Windows Insider channels, particularly affecting the Experimental and Beta channels, with a deadline for certificate updates set for August 11, 2026. The Release Preview builds will not be affected by this update requirement. Users in the impacted channels must update to specific builds to obtain the new certificates, or they may stop receiving updates after the deadline. The minimum build requirements for each channel are outlined, and users can check their current Windows 11 Insider build by using the winver command. Microsoft has confirmed that these updates will not impact activation or licensing status.