configuration Archives

Tech Optimizer

April 3, 2025

1,500+ PostgreSQL Servers Compromised With Fileless Malware Attack

A cryptojacking campaign has targeted over 1,500 organizations by exploiting inadequately secured PostgreSQL database servers. The attackers, identified as JINX-0126, use advanced techniques including credential brute-forcing and fileless execution to deploy Monero (XMR)-mining malware. Approximately 30% of cloud-hosted PostgreSQL servers are affected due to weak or default credentials. The attackers execute commands using PostgreSQL’s COPY FROM PROGRAM function, bypassing standard detection mechanisms. They have been linked to three cryptocurrency wallets with around 550 active mining workers, generating a hashrate of 4.04 GH/s and approximately €10.40 per hour in XMR revenue. The attack begins with credential spraying against default accounts, followed by an SQL injection to fetch the payload. The malware operates in memory, modifies PostgreSQL’s configuration to maintain persistence, and creates cron jobs for reactivation. The campaign reveals significant security gaps in cloud environments, with recommendations for improved access controls and monitoring.

Winsage

April 3, 2025

Is Windows 11 Finally Better Than Windows 10 For Gaming?

Windows 11 has introduced several gaming-focused enhancements that are not present in Windows 10, including: - DirectStorage: Optimized for Windows 11, this technology allows games to load data directly from an NVMe SSD to the GPU, reducing load times. - Auto HDR: Enhances older games by automatically applying high dynamic range lighting effects for users with HDR-capable monitors. - Improved Scheduling for Hybrid CPUs: Offers better task scheduling for Intel's 12th or 13th generation CPUs, resulting in smoother frame rates during CPU-intensive gaming sessions. Benchmark tests show minimal performance differences between Windows 10 and Windows 11, with slight FPS improvements in some titles on Windows 11, especially when using advanced hardware and DirectStorage. As of March 2025, over 55% of Windows users on Steam have transitioned to Windows 11, indicating growing confidence in the operating system among gamers. Windows 11 has addressed many early bugs and driver issues, providing robust stability on compatible systems. Windows 11 has stricter hardware requirements than Windows 10, including the need for TPM 2.0 and UEFI secure boot. Windows 10 remains supported until October 2025, making it a viable option for users with older hardware. Windows 11 features a redesigned interface with a centered Start Menu and Taskbar, rounded corners, and expanded personalization options. It also simplifies the update process with annual feature updates and smaller, faster security updates. Windows 11 enhances integration with Microsoft services, supports Android apps through the Amazon Appstore, and introduces productivity tools like Snap Layouts and improved Task View. Security improvements include mandatory TPM 2.0, enhanced Windows Defender, and a redesigned privacy dashboard for better user control over app permissions. Despite its advancements, Windows 11 has limitations such as ongoing stability issues, driver compatibility concerns, and a simplified taskbar that lacks certain functionalities from Windows 10. Windows 11 is available as a free upgrade for eligible Windows 10 devices through Windows Update.

Winsage

April 3, 2025

Windows 11 finally gets a proper Start menu with this Quantum upgrade — install it now

Microsoft's Windows 11 features a centered Start menu and taskbar aimed at modernizing its aesthetic, but many users find it uninspiring. The Quantum Start Menu is a Windhawk theme designed to enhance the Windows 11 interface, providing a cleaner and more intuitive Start menu and taskbar. YouTuber Link Vegas has created a video guide for installing the Quantum Start Menu, which requires a theme package, Windhawk application, and configuration files.

Tech Optimizer

April 2, 2025

Amazon RDS Proxy announces TLS 1.3 support for PostgreSQL on Aurora and RDS

Amazon RDS Proxy now supports TLS 1.3 for connections to Amazon Aurora PostgreSQL and RDS for PostgreSQL database instances, enhancing security with stronger cryptographic algorithms and a streamlined handshake process. The Proxy automatically negotiates the highest security level during connection setup and can be configured to enforce TLS 1.3 exclusively. TLS 1.3 support is also available for RDS Proxy for MySQL engines. RDS Proxy is a fully managed database proxy that improves performance, reliability, scalability, and security for RDS and Amazon Aurora databases.

Tech Optimizer

April 2, 2025

Over 1,500 PostgreSQL Servers Hit by Fileless Malware Attack

A malware campaign has compromised over 1,500 PostgreSQL servers using fileless techniques to deploy cryptomining payloads. The attack, linked to the threat actor group JINX-0126, exploits publicly exposed PostgreSQL instances with weak or default credentials. The attackers utilize advanced evasion tactics, including unique hashes for binaries and fileless execution of the miner payload, making detection difficult. They exploit PostgreSQL’s COPY ... FROM PROGRAM function to execute malicious payloads and perform system discovery commands. The malware includes a binary named “postmaster,” which mimics legitimate processes, and a secondary binary named “cpu_hu” for cryptomining operations. Nearly 90% of cloud environments host PostgreSQL databases, with about one-third being publicly exposed, providing easy entry points for attackers. Each wallet associated with the campaign had around 550 active mining workers, indicating the extensive scale of the attack. Organizations are advised to implement strong security configurations to protect their PostgreSQL instances.

Winsage

April 2, 2025

6 reasons why I think Microsoft should keep the ‘local account’ option in Windows 11

Microsoft has updated Windows 11 to make it more difficult for users to bypass internet and Microsoft account requirements during installation, specifically in builds 26120.3653 and 26200.5516. The "BypassNRO.cmd" script, which allowed the creation of local accounts without an internet connection, has been removed. Local accounts provide enhanced privacy by storing data locally, simplify the setup process without needing an internet connection, and allow unrestricted access to systems in offline environments. Users can choose meaningful folder names with local accounts, and they facilitate smoother Remote Desktop connections compared to Microsoft accounts. Although local accounts can still be created post-installation, there are concerns about their availability in future updates, especially for the Home edition.

Tech Optimizer

April 2, 2025

Thousands of PostgreSQL servers are being hijacked to mine crypto

Researchers at Wiz have identified a cryptojacking campaign by a group called JINX-0126, targeting over 1,500 misconfigured PostgreSQL servers by exploiting weak login credentials. The attackers deploy the XMRig-C3 miner to mine Monero, consuming nearly all computing resources and increasing electricity usage for victims. Each compromised device is assigned a unique mining worker for tracking. The campaign has evolved to include defensive measures and fileless deployment to evade detection. Nearly 90% of cloud environments host PostgreSQL instances, with about one-third publicly accessible, highlighting security vulnerabilities.

Winsage

April 2, 2025

Is it time to ditch Windows File Explorer? 6 signs you’ve outgrown it

Windows File Explorer is the default file management tool for Windows but often disappoints power users due to several limitations. The search function is slow, taking several minutes for results, especially in large folders or external drives, and requires careful configuration of indexing settings. Customization options are limited, lacking advanced features like split views or custom color labels, while third-party tools offer extensive customization. File Explorer's reliance on traditional folder structures is outdated, missing features like tagging or smart folders, which are crucial for professionals in creative fields. File transfers can be frustrating, with stalls and unpredictable speeds, whereas alternatives like TeraCopy provide faster and more reliable transfers. Filtering and sorting options are basic and insufficient for managing large collections, lacking advanced capabilities found in third-party explorers. Additionally, the absence of dual-pane navigation hinders efficiency, despite recent updates introducing tab functionality.

Winsage

April 1, 2025

Asus’ latest video teases a possible Xbox gaming handheld

Microsoft has not confirmed plans for an Xbox-branded handheld gaming device, but unverified leaks suggest an announcement could occur this year. Asus is positioning itself as a potential partner, having launched devices like the ROG Ally and ROG Ally X. A recent promotional video from Asus hints at a new handheld device that may incorporate Xbox elements, featuring a silhouette resembling an Xbox configuration. Speculation exists that this device could be a modified version of the ROG Ally X, potentially running Windows 11 and supporting Game Pass streaming. The promotional video included phrases suggesting hardware enhancements, but the reality of the project remains uncertain. There is skepticism about the feasibility of a dedicated handheld Xbox, given that many Xbox titles are already available on PC. The video was shared on March 31st, adding to the speculation surrounding its authenticity.

AppWizard

April 1, 2025

Psycho Patrol R, the FPS-Mech sim from the creator of Cruelty Squad, is one of the most challenging, complicated games I’ve ever played⁠—and worth every second it took to figure out its deal

Psycho Patrol R is an early access game that combines immersive simulation, mech combat, and open-ended role-playing. Players assume the role of a bureaucrat-officer in the European Federal Police in an alternate-history 2000, tasked with investigating thought crimes. The game features a hardcore design, requiring patient exploration and experimentation. Players can pilot a mech called the "V-Stalker," which operates on a milsim framework. Weapons are acquired from defeated enemies, and players can customize their character and mech at EFP HQ. The game has a unique saving system involving a holographic globe, and players drop currency upon death, which can be lost permanently if not retrieved. Money serves as both currency and experience points, and players can earn it through missions and eliminating wealthy NPCs. Character stats influence gameplay, and a fatigue meter affects player performance. The Detective class is recommended for its hacking tool and high perception stat. The hacking minigame requires players to input passwords and manipulate characters into recognizable words. Advanced tips include targeting specific NPCs for cash and exploring thoroughly for loot. An eight-minute video guide offers strategies for newcomers.