container Archives

AppWizard

June 20, 2025

Godfather Android malware takes over banking apps

A new version of the Android malware Godfather creates isolated virtual environments on mobile devices to steal account details and transactions from banking apps. It targets over 500 banking, cryptocurrency, and e-commerce applications globally, utilizing a fully virtual file system, virtual process IDs, intent spoofing, and a component called StubActivity. Godfather manifests as an APK app with a virtualization framework, scanning for targeted applications and encapsulating them within its virtual environment. It intercepts permissions for accessibility services, redirecting them to a StubActivity that launches the virtual version of the banking app, allowing it to capture sensitive information. The malware can record account details, passwords, and PIN codes using Xposed for API hooking. It employs a fake lock screen overlay to trick users into entering their credentials and can manipulate user interfaces and execute transactions within the legitimate banking app. Godfather first emerged in March 2021 and has evolved significantly since then, with the latest iteration demonstrating advancements from previous versions.

Winsage

June 20, 2025

How Uniphore achieved 30% cost savings by modernizing Windows servers on AWS

Uniphore is an AI innovation company that faced challenges with its legacy Windows Server infrastructure, which was costly and raised security concerns due to its end-of-support status. To modernize, Uniphore utilized Amazon Web Services (AWS) for containerization and cloud-native solutions, achieving a 30% reduction in costs and improved operational capabilities. The migration involved transitioning from 50 bare-metal Windows Server 2008 R2 instances to a Linux environment on AWS, optimizing call-center analytics workloads and enabling better training of large language models. The modernization strategy included three key areas: application modernization through refactoring and containerization, a custom data migration solution using Type 2 hypervisor technology, and a cloud infrastructure setup with Amazon EC2, Amazon EKS, Amazon EFS, and Amazon S3. The migration was executed in three phases: deploying the hypervisor and DataSync agent, secure data migration and validation, and production cutover with application deployment. Best practices adopted during the process included Infrastructure as Code (IaC) with Terraform, CI/CD pipelines using GitLab, comprehensive monitoring with DATADOG and CloudWatch, and enforcement of AWS Backup policies. The modernization resulted in benefits such as improved scalability and performance, flexibility and portability of applications, enhanced security and compliance, efficient data management, reduced operational overhead, and significant cost savings.

AppWizard

June 19, 2025

Godfather Android malware now uses virtualization to hijack banking apps

A new iteration of the Android malware "Godfather" has emerged, utilizing advanced techniques to create isolated virtual environments on mobile devices for stealthy account data theft and transaction manipulation from legitimate banking applications. It targets over 500 banking, cryptocurrency, and e-commerce applications globally, employing a comprehensive virtual filesystem, virtual Process ID, intent spoofing, and a component called StubActivity. Godfather is delivered as an APK app with an embedded virtualization framework, scanning for installed target applications and launching them within its virtual environment. It intercepts user interactions with genuine banking apps, capturing sensitive data like credentials and PINs while presenting a legitimate interface. The malware can execute commands to unlock devices and initiate transactions while avoiding detection. Godfather first appeared in March 2021 and has evolved significantly since then, with the latest version representing a notable advancement over previous iterations. Users are advised to download apps only from trusted sources and remain cautious about app permissions to protect against this malware.

Tech Optimizer

June 17, 2025

EDB Postgres AI Accelerates New Era of Sovereign Data and AI for Enterprises, Industries, and Nations

EnterpriseDB has introduced significant advancements to its EDB Postgres AI (EDB PG AI) platform, enabling secure and compliant deployment of AI solutions across Postgres environments. The platform integrates transactional, analytical, and AI workloads into a unified system, featuring automatic pipelines and built-in development tools for data automation. Key capabilities include low-code/no-code simplicity for rapid AI pipeline creation and comprehensive hybrid management for real-time insights across databases. Recent research indicates that only 13% of enterprises have successfully implemented agentic AI applications at scale, with early adopters achieving up to 227% higher ROI. Collaborations with Red Hat aim to provide organizations with solutions for successful AI outcomes. New features include enhanced data security, a purpose-built PG AI Analytics Engine for high-performance queries, and a universal data store for various data models. Performance advantages include six times better total cost of ownership (TCO) compared to SQL Server and up to 150 times faster NoSQL performance than MongoDB. A comparative analysis showed that EDB PG AI reduced overall complexity by 67% and maintenance costs by 38%.

AppWizard

June 12, 2025

Android 16 QPR1 Beta redesigns the Pixel Launcher search bar, adds AI Mode

In Android 16 QPR1 Beta 2, the Pixel Launcher features a redesigned search bar that aligns with the Google app's updated homescreen widget. The new design includes a more compact search bar with an AI Mode icon on the right, a magnifying glass in four Google colors, and a darker background for better organization. The redesign is limited to the search bar and does not affect the top of the app launcher. Currently, users have limited customization options for the search bar shortcut, while the Google app offers various shortcuts that integrate with Google Lens. The redesign is visible on one device following a server-side update, and a new gradient G logo was introduced recently.

AppWizard

June 6, 2025

Latest Google Messages beta brings its Expressive redesign to more users

A Reddit user with a Galaxy Z Fold 6 has reported the new M3 Expressive redesign for Google Messages, which includes a reworked plus icon menu and a "connected button group" for emojis and GIFs. The beta update features a solid-color background for conversations, distinguishing texts from contact options. The redesign is not yet available in the stable version of Google Messages but is gradually being rolled out to beta users. The conversation field now has a rounded-corner container, separating it from calling and menu buttons. Not all beta users have received the update, indicating it is still being distributed. The Material 3 Expressive design philosophy aims to enhance the Android experience with vibrant colors and dynamic shapes. Similar updates have been noted in other Google applications, such as Gmail.

Tech Optimizer

May 31, 2025

New WAL Archiving Tool ‘pgrwl’ Delivers Zero Data Loss for PostgreSQL in Containerized Environments

The project is a research platform for streaming Write-Ahead Logging (WAL) archiving, focusing on achieving RPO=0 during recovery scenarios in containerized environments. It replicates features of pg_receivewal, including automatic reconnection, streaming into partial files, and error checking. Installation requires a single binary, and debugging can be done with a preferred editor and a Docker container running PostgreSQL. Key features include streaming WAL archiving with replication slots, secure handling of .partial files, support for S3/SFTP backends with optional compression and encryption, a built-in HTTP server for serving WALs, minimal configuration options, and testability through Docker-based integration tests.

Winsage

May 21, 2025

Active Directory DMSA Attack Detailed By Researchers

The delegated Managed Service Account (dMSA) feature in Windows Server 2025 has a privilege escalation vulnerability that allows attackers to compromise any user in an Active Directory (AD) environment. Research by Yuval Gordon revealed that in 91% of examined environments, users outside the domain admins group had the necessary permissions to exploit this vulnerability. The attack can be executed with benign permissions on any organizational unit (OU) and does not require actual migration of accounts. Gordon's technique, called “BadSuccessor,” enables an attacker controlling a dMSA object to inherit the permissions and keys of any user, including those with high privileges. Microsoft has acknowledged the vulnerability but categorized it as a Moderate severity issue. Akamai recommends limiting the creation of dMSAs and tightening permissions until a patch is released.

Tech Optimizer

May 20, 2025

How to Set Up PostgreSQL with NestJS and Docker for Fast Local Development: A Quick Guide

Launching a new project with PostgreSQL for NestJS development can be efficiently managed by running a local PostgreSQL instance in Docker. This setup includes a Dockerfile for the NestJS application, a docker-compose.yml file to connect Node and PostgreSQL, and an .env file for environment variables. The Dockerfile specifies a Node environment, while the docker-compose.yml file configures services for both the database and the API. The database service uses the PostgreSQL image, and the API service builds from the Dockerfile, ensuring that the database persists through reboots. An .env file is created to store configuration details such as database user, password, and database name. Additionally, package.json scripts are enhanced for quick access to the database and application containers. In the NestJS application, the main startup file initializes the app, and a TypeORM configuration file is provided for database connection settings. Common development commands include starting the services, viewing logs, tearing down containers, and accessing the database and application shells.

AppWizard

May 5, 2025

Gemini app update adds Android homescreen widget

The Gemini app has introduced a new Android homescreen widget that is now widely available to users. The widget is highly resizable, incorporates Dynamic Color, and resembles the revamped widgets of Google Keep and Drive. It features a sparkle icon that launches the app and keyboard, and includes buttons arranged within a rounded rectangle, with a Gemini Live shortcut. Users can expand the widget to access additional functionalities like speech-to-text and the Gemini camera, and it can be configured in various layouts, including a search bar and a grid of shortcuts. The widget is part of Gemini app version 1.0.751104895 and is compatible with Android 10 and newer versions. Users can add it to their homescreen by updating the app and selecting Widgets.