endpoint Archives

Tech Optimizer

September 1, 2026

Fake Microsoft Security Scan Tells You to Remove Antivirus—Then Scammers Ask for Remote Access

A new web-based scam is using counterfeit Microsoft-branded security scans to deceive users into uninstalling their antivirus software. The scam websites conduct fake inspections, reporting false security failures and claiming third-party antivirus products are unsupported by Windows. They gather browser information to create customized-looking scan reports and aim to mislead victims into a fraudulent refund process. Investigators have identified 11 related scam sites under the name SysScan, which present themselves as legitimate Microsoft security checks. The scam does not involve file downloads but relies on convincing websites, fabricated security scores, and personal information forms. The scan results are hard-coded, and the security score is limited to a range between 13 and 30 out of 100. The scams instruct users to uninstall antivirus software, which is misleading since Windows does not cease support for third-party antivirus solutions. The scam sites request extensive personal information, including names, addresses, phone numbers, and banking details, and redirect victims to a page claiming a refund manager will call shortly. This process allows scammers to gain remote access to victims' computers. Indicators of compromise include specific IP addresses and domains associated with the scam.

Tech Optimizer

August 26, 2026

How to Protect Against Ransomware: 13 Steps [2026]

Global ransomware attacks increased by 0.8% quarter-over-quarter in Q2 2026. The group Qilin has 279 confirmed victims, maintaining its position as the leading threat actor for four consecutive quarters. The rival group The Gentlemen saw a 62% increase in victims, reaching 269. Checkpoint Research's report indicates a shift in the ransomware landscape, challenging the narrative of declining attacks. IBM's analysis shows breaches within supply chains and third-party vendors have quadrupled over the past five years. Effective ransomware protection requires administrative access to endpoints, firewalls, and backup systems, along with specific software versions and tools. The 3-2-1-1-0 backup strategy is recommended, emphasizing offline, immutable backups. Organizations should implement multi-factor authentication (MFA) across all access points and actively patch known vulnerabilities. Network segmentation is crucial to limit ransomware spread, and canary files can provide early warnings of attacks. Regular phishing simulations and a well-documented incident response plan are essential for preparedness.

Winsage

August 23, 2026

Microsoft Edge is ending support for MDAG and WIP in Windows 10

Microsoft has phased out support for Microsoft Defender Application Guard (MDAG), starting with its deprecation for Office applications in November 2023 and for the Edge browser in December 2023. By April 2024, MDAG was removed from Edge and other browser stores, and it was completely eliminated from Windows 11, version 24H2. Microsoft is finalizing the retirement of MDAG by discontinuing support in Edge entirely. The advisory MC1459132 indicates that this phase affects Microsoft Edge users on Windows 10, as Windows Information Protection (WIP) was already phased out in favor of Microsoft Purview in 2022. Organizations using WIP are advised to transition to Microsoft Purview Information Protection, Microsoft Purview Data Loss Prevention (DLP), Endpoint DLP, and Intune app protection policies. Users of MDAG should utilize Edge's built-in security features and consider other isolation solutions. Support for WIP and MDAG will officially end by September 2026, and functionalities related to them will stop in Microsoft Edge 154 and later versions. IT administrators are encouraged to begin migration activities to avoid disruptions.

Tech Optimizer

August 22, 2026

Best Ransomware Protection 2026: Tested and Ranked

Ransomware protection is best approached as a layered strategy rather than relying on a single solution. The effectiveness of software is significantly enhanced by maintaining a well-managed backup that is disconnected during an attack. Five tools were evaluated based on their default settings, focusing on behavioral detection, protected folders, file rollback, and real-time protection. 1. Norton 360: Rated as the best overall ransomware protection, it offers comprehensive features including behavioral monitoring, protected folders with dual alert modes, and 50 GB of cloud backup within a single subscription. It has a perfect score in advanced threat assessments. 2. Bitdefender: Recognized for its file rollback and remediation capabilities, it provides an effective "undo" feature that restores files, although this feature is turned off by default. 3. Avast One Free: The best free ransomware protection option, it includes a dedicated shield on the free Windows tier and has achieved a perfect score in advanced threat assessments. 4. NordVPN Threat Protection Pro: Best for blocking the delivery route of ransomware, it prevents downloads before encryption starts but cannot stop the process once it has begun. 5. McAfee: Best for protecting multiple devices simultaneously, it offers unlimited device coverage on most plans with integrated ransomware defense in its scanning engine. Modern ransomware protection software has shifted from signature matching to focusing on monitoring the behavior of processes interacting with files. The four essential layers of protection include behavioral monitoring, protected folders, automatic file rollback, and backup. Most users do not need a separate anti-ransomware product, as these features are typically included in main antivirus suites, with the key consideration being whether these features are activated. The rankings of the tools were based on whether the ransomware protection layer is enabled by default, the extent of file recovery when intervention occurs, and the frequency of false positives during normal use. - Norton 360: Best overall, with protection enabled by default and a perfect score in advanced threat testing. - Bitdefender: Best for file rollback, but the rollback feature is disabled by default. - Avast One Free: Best free option, with a perfect score in advanced threat assessments but lacks rollback capabilities. - NordVPN Threat Protection Pro: Effective at blocking malware downloads but does not provide rollback or backup features. - McAfee: Suitable for families with multiple devices, offering automatic backup of flagged files but lacks user-configurable protected folder options. The effectiveness of ransomware protection tools is primarily assessed through behavioral responses rather than library matching. Backup remains a critical layer of defense, functioning even when other layers fail.

Winsage

August 20, 2026

I spent time with the August Windows 11 Insider builds, and these 8 changes reveal Microsoft’s next phase for the OS

In early August, there were no new Windows 11 builds released for over 15 days in the Windows Insider Program. On August 17, Microsoft released five new preview builds, introducing several features and enhancements. Key updates include a fully customizable context menu, allowing users to tailor options directly from Settings under Personalization, and improvements to the desktop background experience with higher resolution previews and better slideshow transitions. The Camera Roll backup feature now automatically backs up photos and videos to OneDrive. The Magnifier tool received a visual refresh, and the Windows Recovery Environment was upgraded to reuse eligible Wi-Fi profiles automatically. Microsoft also removed the Windows Management Instrumentation Command-line (WMIC) tool and the Drag Tray feature while maintaining access to WMI through PowerShell. File Explorer improvements include a faster launch for the "Home" page and touch scrolling support in the "Recommended" section. Minor visual adjustments were made to the Windows Security app, enhancing its alignment with the Windows 11 design language.

Winsage

August 18, 2026

CISA confirms 2025 Windows Task Host flaw exploited by ransomware groups

The Cybersecurity and Infrastructure Security Agency (CISA) confirmed a privilege escalation vulnerability in the Windows Task Host, designated as CVE-2025-60710, which is being exploited by ransomware groups. Microsoft released a patch for this flaw on November 11, 2025, and CISA added it to its Known Exploited Vulnerabilities catalog on April 13. The vulnerability allows scheduled tasks to operate at the highest privilege level, enabling attackers to delete files and potentially gain full control over a machine. This access can lead to the extraction of credentials, manipulation of endpoint protection, and lateral movement across networks, culminating in widespread ransomware deployment. Security experts emphasize the critical nature of this vulnerability and urge organizations to address it promptly, as it poses significant risks to systems running Windows 11 and Server 2025.

Tech Optimizer

August 18, 2026

Migrate Amazon Aurora PostgreSQL across major versions with active Debezium CDC connectors using native logical replication

Organizations using Debezium Change Data Capture (CDC) connectors on Amazon Aurora PostgreSQL-Compatible Edition face challenges during major database version upgrades. In-place upgrades require downtime, while blue/green deployments disrupt CDC event pipelines. A method using PostgreSQL's native logical replication allows migration between a source cluster (current version) and a target cluster (new major version) without a full connector re-snapshot. This approach minimizes risks of data loss and allows existing Debezium connectors to operate on the source during synchronization. The cutover process involves disabling the replication subscription, synchronizing sequences, creating a new Debezium replication slot on the target, and redirecting the connector, resulting in a brief pause for Kafka consumers. Prerequisites for this method include enabling logical replication on the source cluster, ensuring the target cluster is provisioned in the same VPC, and confirming that tables participating in CDC have primary keys. The process involves configuring parameter groups, creating publications, and establishing subscriptions for logical replication. During cutover, application writes are halted, and replication lag must be monitored to ensure it reaches zero before proceeding. After the cutover, ongoing monitoring of replication health and Kafka consumer offsets is necessary. Common failure scenarios include Aurora writer failover, Debezium connector stalls, large messages exceeding Kafka limits, DDL changes during synchronization, and long-running transactions blocking lag drain. Each scenario has specific symptoms, detection methods, and resolutions. Post-migration, organizations should establish monitoring for replication lag growth and Kafka consumer offset divergence. Automation can streamline the migration process for organizations managing multiple clusters, utilizing AWS Cloud Development Kit (CDK) constructs for cluster provisioning, schema replication, and cutover orchestration. After verifying stable operation on the target cluster, the old Debezium connector and source cluster can be decommissioned. Limitations include the absence of failover slots on Aurora PostgreSQL 17 and the need to handle TOAST columns appropriately.

Tech Optimizer

August 17, 2026

Avast, AVG and Norton in 2026: smarter security for a new generation of threats

In 2026, cybersecurity has shifted from traditional virus blocking to addressing a wider range of threats, including phishing, AI-generated scams, fake websites, account takeovers, ransomware, and fraudulent calls. Key players in this transformation include Avast, AVG, and Norton, which are integrating advanced AI, scam detection, and multi-device security into their offerings. Avert IT Distribution (Avert ITD) is the official distributor for Avast and AVG in Africa and provides Norton solutions, along with essential licensing and support services. Avast has introduced Scam Guardian technology, which combines automated protection with an AI tool to analyze suspicious communications. AVG has enhanced its AntiVirus with AI-driven protection against various online threats and offers mobile security features like Scam Guardian. Norton has expanded its services to include AI-powered Scam Protection and a secure browser for small and medium enterprises, along with significant upgrades to its VPN capabilities. Avert ITD supports African resellers and businesses by providing localized access to these cybersecurity solutions, ensuring tailored support and guidance. The company has also launched a WhatsApp support channel for quick assistance. Avert ITD emphasizes its commitment to reseller growth and accountability in its distribution approach.

Tech Optimizer

August 15, 2026

How to Set Up Amazon RDS: 12 Steps, 90 Min [2026]

Amazon RDS supports various database engines, including Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle Database, Microsoft SQL Server, and Db2. As of June 2026, "amazon rds" receives approximately 8,100 monthly searches in the U.S. AWS offers a Free Tier for RDS, allowing 750 instance-hours per month on specific instance types for the first 12 months. A db.t4g.micro instance starts at approximately [openai_gpt model="gpt-4o-mini" prompt="Summarize the content and extract only the fact described in the text bellow. The summary shall NOT include a title, introduction and conclusion. Text: Amazon RDS, a cornerstone of AWS's managed database offerings, continues to gain traction among developers and businesses alike. As of June 2026, the term "amazon rds" garners approximately 8,100 monthly searches in the U.S., reflecting a sustained interest in its capabilities. This tutorial aims to provide a comprehensive, step-by-step guide to setting up Amazon RDS, moving beyond mere marketing rhetoric to deliver actionable insights. What Is Amazon RDS and What You’ll Build in This Tutorial Amazon RDS supports a variety of database engines, including Amazon Aurora, PostgreSQL, MySQL, MariaDB, Oracle Database, Microsoft SQL Server, and Db2. Each engine operates on a managed DB instance that AWS provisions, patches, and monitors. Users can select instance classes based on CPU and memory requirements, storage types, and configurations across Availability Zones. The advantages of RDS over self-hosted solutions, such as installing PostgreSQL on an EC2 instance, are significant. RDS automates backups, point-in-time recovery, minor-version patching, Multi-AZ failover, and read replicas, allowing teams to focus on application development rather than database maintenance. This tutorial will focus on PostgreSQL, the second most searched RDS engine, while noting that similar workflows apply to MySQL and MariaDB. Prerequisites and Amazon RDS Pricing You Need to Know To begin, users will need an AWS account with billing enabled, an IAM user or role with permissions for RDS, EC2, and Secrets Manager, as well as the AWS CLI installed and configured. A local PostgreSQL client or a GUI tool like DBeaver can facilitate database connections but is not strictly necessary. Understanding costs is crucial before provisioning resources. AWS offers a Free Tier for RDS, allowing 750 instance-hours per month on specific instance types for the first 12 months. After the Free Tier, pricing varies by instance class and configuration, with costs for a db.t4g.micro instance starting at approximately .68 per month in the US East region. Step 1: Choose Your Database Engine and Instance Class Selecting the appropriate database engine is the first step. If your team is already familiar with PostgreSQL or MySQL, these open-source options are typically more cost-effective than commercial alternatives. PostgreSQL is often favored for its advanced features, while MySQL is commonly used with various web applications. When it comes to instance classes, starting with a smaller instance, such as db.t4g.micro, is advisable. RDS allows for resizing instances with minimal downtime, making it easy to adjust as application demands grow. Additionally, AWS Graviton processors provide cost-effective performance for many workloads. Step 2: Set Up a VPC, Subnet Group, and Security Groups RDS instances should reside within a Virtual Private Cloud (VPC) for enhanced security. AWS recommends placing production databases in private subnets without direct internet access. Users must create a subnet group that spans multiple Availability Zones, even for Single-AZ instances, to support future upgrades and maintenance. Creating a security group that restricts access to the database port from specific application tiers is essential. This practice prevents unauthorized access and protects sensitive data. Step 3: Launch Your Amazon RDS Instance In the RDS console, users can initiate the creation of a database instance. Selecting the "Standard create" option allows for a more tailored setup compared to the "Easy create" method. Users will choose PostgreSQL, specify the instance class and storage settings, and attach the previously created subnet and security groups. Using the AWS CLI Instead of the Console For those who prefer command-line interfaces, the AWS CLI offers a powerful alternative for creating RDS instances. The command includes options for managing the master user password and enabling storage encryption, ensuring a secure and efficient setup process. Step 4: Connect to Your Database From a Client or App Once the RDS instance is available, users can retrieve its endpoint to establish a connection. Due to the private nature of the instance, connections must be made from within the VPC or through secure methods such as bastion hosts or VPNs. After connecting, users should create the application database and a dedicated user for application access, ensuring that the master user credentials are not used directly in application code. Step 5: Secure Credentials With AWS Secrets Manager Utilizing AWS Secrets Manager to store database credentials enhances security by eliminating hardcoded passwords in application code. This practice allows for easier credential management and rotation, reducing the risk of exposure. Step 6: Enable Multi-AZ for High Availability To enhance availability, enabling Multi-AZ configurations is recommended. This setup maintains a standby instance in a different Availability Zone, allowing for automatic failover in case of issues with the primary instance. AWS backs this configuration with a robust uptime SLA. Multi-AZ DB Instance vs Multi-AZ DB Cluster Understanding the differences between Multi-AZ DB instances and clusters is crucial for optimizing performance. While a Multi-AZ DB instance provides failover capabilities, a Multi-AZ DB cluster offers additional read capacity, making it suitable for high-throughput applications. Step 7: Add Read Replicas to Scale Reads For applications experiencing high read loads, implementing read replicas can significantly improve performance. These replicas allow for offloading read traffic from the primary instance, enhancing overall throughput. Step 8: Configure Automated Backups and Manual Snapshots Automated backups are essential for data recovery, and users should configure retention periods that align with their data protection needs. Manual snapshots provide an additional layer of security before making significant changes to the database. Step 9: Turn On IAM Database Authentication Implementing IAM database authentication can enhance security by replacing long-lived passwords with short-lived tokens. This method provides an audit trail and reduces the risk associated with credential leaks. Step 10: Monitor Performance With CloudWatch and Performance Insights Monitoring database performance is vital for maintaining optimal operation. AWS CloudWatch provides basic metrics, while Performance Insights offers deeper visibility into query performance, helping users identify and address potential bottlenecks. Step 11: Provision RDS With Terraform Instead of the Console For teams managing multiple environments, adopting infrastructure as code with Terraform can streamline the provisioning process. This approach ensures consistency and facilitates collaboration among team members. Step 12: Clean Up Unused Resources and Control Costs Cost management is crucial in cloud environments. Users should regularly audit their resources, stopping or deleting unused instances to avoid unnecessary charges. Implementing automated processes for non-production instances can further optimize costs. A Complete Working Example: Connecting a Node.js App to RDS Integrating the RDS instance with a Node.js application demonstrates the practical application of the setup. By utilizing Secrets Manager for credential management and establishing a connection pool, developers can create efficient and secure applications. Amazon RDS vs Aurora vs Self-Hosted PostgreSQL When considering database solutions on AWS, it’s essential to weigh the benefits of RDS against alternatives like Aurora and self-hosted PostgreSQL. RDS offers a balance of managed services and cost-effectiveness, while Aurora provides enhanced performance at a higher price point. 5 Common Amazon RDS Pitfalls (and How to Avoid Them) Leaving the instance publicly accessible. Always ensure that public access is disabled to prevent unauthorized access. Running production on Single-AZ. Opt for Multi-AZ configurations to avoid outages during maintenance or failures. Skipping the final snapshot on delete. Always take a final snapshot to prevent data loss. Ignoring storage autoscaling limits. Set appropriate limits to avoid service interruptions during traffic spikes. Letting a major version age into Extended Support. Regularly update to avoid unexpected costs associated with extended support. Troubleshooting Amazon RDS: 9 Common Errors and Fixes “Could not connect to server: Connection timed out.” Check security group rules and subnet configurations. “FATAL: password authentication failed for user.” Verify that the correct credentials are being used. Instance stuck in “creating” for a long time. This can be normal for larger instances; check the status via the CLI. Modified settings not taking effect. Ensure that changes are applied immediately if needed. “PG::DiskFull” or storage-full errors. Check storage settings and consider increasing allocated storage. Sudden CPU spikes with no obvious cause. Use Performance Insights to identify problematic queries. Failover takes longer than expected. Investigate potential DNS caching issues on the client side. Read replica lag keeps growing. Scale the replica instance class if necessary. Endpoint changed after restoring from a snapshot. Update application configurations to point to the new endpoint. Advanced Tips for Running Amazon RDS in Production To ensure that RDS instances perform optimally under production loads, consider implementing reserved instances for cost savings, utilizing Blue/Green Deployments for upgrades, and employing RDS Proxy for serverless applications. Additionally, maintain a Terraform configuration as the source of truth to prevent configuration drift. Frequently Asked Questions About Amazon RDS How much does Amazon RDS cost per month? The monthly cost varies based on instance class, storage, and configuration. A db.t4g.micro instance runs approximately .68 per month, while a production-grade db.r6g.xlarge with Multi-AZ can cost around 2 monthly. Is the Amazon RDS free tier still available in 2026? Yes, new AWS accounts can access the Free Tier for 12 months, which includes 750 hours per month on specific instance types. What’s the real difference between RDS and Aurora? RDS operates standard database engines, while Aurora provides a proprietary storage and replication layer designed for enhanced performance and resilience. Should I use a Multi-AZ DB instance or a Multi-AZ DB cluster? For most workloads, a Multi-AZ DB instance is sufficient. Consider a Multi-AZ DB cluster for applications requiring faster failover and additional read capacity. How many read replicas can I create? RDS supports multiple read replicas, with limits varying by engine. Check the AWS console for specific limits during provisioning. Does Amazon RDS support IAM authentication instead of passwords? Yes, IAM authentication is supported for MySQL, PostgreSQL, and MariaDB, providing enhanced security through short-lived tokens. How long does it take to launch an RDS instance? A basic Single-AZ instance typically becomes available within several minutes, while Multi-AZ instances may take longer due to provisioning requirements. Can I migrate an existing on-premises database into RDS? Yes, AWS Database Migration Service facilitates migrations from on-premises or other cloud databases to RDS." max_tokens="3500" temperature="0.3" top_p="1.0" best_of="1" presence_penalty="0.1" frequency_penalty="frequency_penalty"].68 per month in the US East region. Users need an AWS account with billing enabled, an IAM user or role with permissions for RDS, EC2, and Secrets Manager, and the AWS CLI installed and configured. RDS automates backups, point-in-time recovery, minor-version patching, Multi-AZ failover, and read replicas. Users should create a subnet group that spans multiple Availability Zones and restrict access through security groups. Multi-AZ configurations maintain a standby instance for automatic failover. AWS CloudWatch provides basic metrics, while Performance Insights offers deeper visibility into query performance. Users should regularly audit resources to manage costs effectively.

Winsage

August 14, 2026

‘This one just needs a script’: Researchers find ultimate Windows kill switch which can disable antivirus w…

Researchers from the University of Birmingham and Durham University discovered a vulnerability in consumer DDR4 and DDR5 memory chips, termed "Download more RAM," which allows attackers to misreport memory configuration, potentially doubling the perceived RAM. This manipulation enables unauthorized access to memory allocations, bypassing Windows' Virtualization-based Security (VBS) and Hypervisor-Enforced Code Integrity (HVCI), and disabling antivirus software. The vulnerability affects major manufacturers like Corsair, G.Skill, and ADATA, which collectively hold over 55% of the high-performance memory market. Microsoft has patched the vulnerability, cataloged as CVE-2026-23670, with a medium severity score of 5.7/10, in the April 2026 Patch Tuesday update. Corsair has introduced a feature to enable write protection on their memory modules, and other tools are available for additional protection.