NewApp Digest
search bot

environment

The Fault Line Spreads: Azure’s September CVE Cluster Now Covers PostgreSQL and Billing
Tech Optimizer
September 28, 2026

The Fault Line Spreads: Azure’s September CVE Cluster Now Covers PostgreSQL and Billing

Two newly identified Critical CVEs have expanded Microsoft's September identity infrastructure vulnerabilities to over ten verified weaknesses across more than ten distinct services. The Azure Database for PostgreSQL is vulnerable to CVE-2026-85878, an Improper Authorization flaw (CWE-285) with a CVSS score of 9.9. Azure Billing is impacted by CVE-2026-62874, which presents an Insufficient Data Authenticity Verification issue (CWE-345) with a CVSS score of 10.0. Both vulnerabilities were disclosed on September 18 and validated by Tenable and MITRE. CVE-2026-85878 allows an authorized attacker to elevate privileges over the network with minimal complexity, while CVE-2026-62874 requires no authentication, enabling unauthenticated attackers to jeopardize financial integrity. The vulnerability cluster first emerged during the Patch Tuesday cycles on September 3 and September 8, with initial reports highlighting critical flaws in core services. Other September disclosures include CVE-2026-83711 (Azure AD B2C, CVSS 10.0), CVE-2026-70352 (Azure AI Language, CVSS 10.0), CVE-2026-83941 (Entra ID, CVSS 9.9), CVE-2026-62916 (Entra ID, CVSS 9.1), CVE-2026-69857 (Azure Cosmos DB, CVSS 8.5), and CVE-2026-69854 (Spring Cloud Azure, CVSS 9.0). Activity heightened between September 17 and 18 with the introduction of CVE-2026-77903 (Microsoft Dataverse, CVSS 9.0) and CVE-2026-69843 (Microsoft Fabric, CVSS 10.0). The attack surface has broadened from authentication concerns to encompass trust in AI endpoints, data storage locations, and billing verification processes. Seven out of the ten vulnerabilities are unauthenticated, and all issues were addressed through server-side fixes by Microsoft. The extensive range of affected services suggests these vulnerabilities indicate a shared architectural dependency on authentication logic.
Spinnaker launches PostgreSQL support & migration services
Tech Optimizer
September 28, 2026

Spinnaker launches PostgreSQL support & migration services

Spinnaker Support has launched a suite of PostgreSQL support and migration services to help organizations reduce their reliance on Oracle databases. The services include enterprise software support for PostgreSQL and migration services facilitated by HexaCluster, allowing customers to maintain their Oracle environments while transitioning workloads to PostgreSQL. Spinnaker is also developing an enterprise distribution for PostgreSQL, built around standard PostgreSQL and open-source components. The support package includes break-fix support, troubleshooting, security guidance, performance and configuration support, and lifecycle guidance. The migration service analyzes Oracle database dependencies, automates parts of the conversion process, validates production readiness, and facilitates controlled cutovers. The HexaRocket platform from HexaCluster aids in migration, data movement, and replication. The launch aligns with a trend of organizations reassessing database expenditures, with 55.6% of developers using PostgreSQL according to the 2025 Stack Overflow Developer Survey. Spinnaker aims to enhance its role in enterprise infrastructure decisions by supporting both Oracle and PostgreSQL environments. Martin Biggs has been appointed Vice President and General Manager of the PostgreSQL Practice, overseeing PostgreSQL support and migration services. Spinnaker's PostgreSQL offerings are part of its Run, Optimize, Transform framework, designed to help customers manage current systems and plan for long-term changes.
Microsoft was better at software in the '90s, and these still-useful Windows utilities prove it
Winsage
September 28, 2026

Microsoft was better at software in the ’90s, and these still-useful Windows utilities prove it

Microsoft PowerToys originated during the development of Windows 95 as small programs created by engineers to test concepts and ease workloads. The first collection of PowerToys included tools like FindX, Send To X, and Tweak UI. System Configuration (MSConfig) helps isolate configuration and startup issues by allowing selective loading of services and startup components, remaining useful despite modern management shifting to Task Manager. Disk Cleanup was launched with Windows 98 to help users reclaim disk space, featuring commands that allow saving cleanup profiles, a functionality that persists in Windows 11. Task Scheduler, introduced in 1995 as System Agent in the Microsoft Plus! pack for Windows 95, automates tasks based on specific triggers. System File Checker (SFC), dating back to Windows 98, scans and repairs protected Windows resources, evolving from a graphical utility to a command-line tool. Device Manager provides an expandable tree of hardware components and reflects advancements in Microsoft's Plug and Play system from Windows 95, continuing to assist users in hardware inspection and troubleshooting. The DirectX Diagnostic Tool (DxDiag) was created for gamers in the late '90s to examine hardware and software configurations related to DirectX and remains available in Windows 11.
After 8 years, Monster Hunter: World gets seamless co-op on PC thanks to a modder
AppWizard
September 27, 2026

After 8 years, Monster Hunter: World gets seamless co-op on PC thanks to a modder

Players of Monster Hunter: World can now experience a new seamless cooperative mode introduced by modder huntardy. This modification allows players to embark on quests, explore expeditions, and engage in story cutscenes together. A demonstration of the mod showcases its functionality, enhancing the monster hunting experience. Users are advised that each game launch with the modification creates a backup of the save file in a specific folder, preserving the last ten saves. The modification is available for free on Nexus Mods, and an in-game panel appears in Steam to guide users through the new features.
Windows 11's driver signature requirement is one of the best anti-consumer security features out there
Winsage
September 27, 2026

Windows 11’s driver signature requirement is one of the best anti-consumer security features out there

Windows 11 requires drivers to be digitally signed, a policy aimed at enhancing security by preventing unauthorized code from executing at the kernel level. This requirement, which began with Windows Vista and became mandatory with Windows 10, version 1607, has tightened over the years, especially with the introduction of UEFI Secure Boot and TPM in Windows 11. While this enforcement protects against malware and supports anti-cheat systems in gaming, it limits user autonomy and imposes significant challenges for developers, particularly those working on smaller projects. In contrast, Linux allows users more freedom to modify their systems, though this flexibility can compromise security.
Google researcher explains why Windows NT "puts Linux to shame," and imagines an alternate history where it won
Winsage
September 27, 2026

Google researcher explains why Windows NT “puts Linux to shame,” and imagines an alternate history where it won

Laurie Kirk, a Google researcher and former Microsoft reverse engineer, argues that the Windows NT kernel is superior to Linux in several aspects, particularly in its architecture for managing resources and access permissions. She emphasizes that her critique focuses on the system architecture rather than the user interface of Windows 11. Kirk raises concerns about Linux's suitability for AI agents due to its complex security model, while praising NT's object-based design and security framework. She speculates on an alternate history where Microsoft had created an "Open NT," allowing for customizable components, but acknowledges the challenges of maintaining forks in operating systems. Critics of NT highlight its performance and reliability issues, while Linux's open-source nature has contributed to its dominance in servers and cloud computing. Kirk suggests that future operating systems may need to balance the defined resource types of NT with the flexibility of Linux, especially as AI technology evolves.
silver Android smartphone
Winsage
September 26, 2026

Microsoft just rethought its entire AI strategy: What the new Copilot means for Windows & your everyday workflows

Microsoft is evolving its offerings in artificial intelligence, particularly with updates announced at its Copilot event, which signify a shift towards a more integrated Microsoft 365 experience. The latest version of Copilot aims to create a cohesive workspace that connects documents, conversations, data, and tasks, making AI more accessible for everyday users and enterprise customers. CEO Satya Nadella emphasized the importance of keeping humans "in the flow of work" and creating systems that learn continuously. Key features include Autopilot, a digital teammate that manages tasks across Microsoft Teams, Outlook, and other applications, allowing users to focus on strategic initiatives. At the core of these advancements is Microsoft IQ, a unified intelligence layer that connects data and workflows throughout the Microsoft ecosystem. Microsoft is also introducing a plugin registry for custom integrations and implementing FinOps for AI to optimize spending. Regular consumers can access these features based on their M365 Premium or Pro subscriptions, with further developments expected at Microsoft Ignite in November.
Windows finally let me rip Bing out of my desktop. The speed boost is undeniable
Winsage
September 26, 2026

Windows finally let me rip Bing out of my desktop. The speed boost is undeniable

Windows 11 users previously experienced a dual-search environment where local and web results were mixed, often leading to cluttered searches. Many resorted to registry edits to disable web results, but these workarounds were not fully effective. The search interface was complicated by irrelevant web links, making it difficult to find local files. With the introduction of version 26H2, Microsoft added a toggle in Settings that allows users to manage web searches independently, improving the search experience by prioritizing local files. This feature began rolling out after the September 2026 Patch Tuesday update. Disabling web results streamlines the search panel but removes the Copilot entry and may not be immediately available to all users.
Search