Extension Archives

Tech Optimizer

May 28, 2026

Graph Queries Across Billions of Rows of Scattered Data with Postgres and Apache AGE™

Postgres engines can now connect to large data repositories using extensions like pg_lake, allowing access to files in object storage formats such as CSV, JSON, Apache Parquet™, and Apache Iceberg™. The Apache AGE™ extension enhances data usability through graph relationships, enabling complex queries that require both graph traversal and analytical aggregation. Apache AGE introduces openCypher graph query support within Postgres, allowing for integration without data movement, as both Iceberg tables and graphs reside in the same database. This integration facilitates the construction of graphs from lake tables, allows for combining SQL and Cypher queries, and simplifies operational processes by consolidating application connection, security, and backups into a single workflow. An example of this integration is a healthcare platform using Iceberg tables on Amazon S3, which includes various data types such as claims, providers, patients, and referrals. To utilize these features, necessary Postgres extensions must be loaded, with pg_lake operating alongside a sidecar, the pgduck_server, for Iceberg operations.

Winsage

May 23, 2026

Windows 11 26H1: Microsoft’s driver changes target platform, WLAN, storage, and GPU debugging

Microsoft has refreshed its driver documentation for Windows 11 version 26H1, focusing on enhancements within the driver ecosystem rather than user-centric features. The Windows Driver Kit 10.0.28000.1839, released on May 4, 2026, is designated for driver development on this version and supports Visual Studio 2026. Networking drivers have been updated to support WPA3 Compatibility Mode Security, with an upgraded WiFiCx TLV parser and the removal of outdated WDI datapath definitions. The storage driver stack now accommodates SD Ultra Capacity (SDUC) for cards exceeding 2 TB and up to 128 TB. In graphics, kernel header definitions for GPU Process Debug Blob Collection have been introduced, and static analysis integration has been intensified with updated CodeQL suites. These updates aim to prepare the driver base for future hardware demands and improve driver quality and compatibility.

Tech Optimizer

May 22, 2026

Threat Protection Pro: all you need to know about IPVanish’s anti-malware tool

Virtual Private Networks (VPNs) have evolved into comprehensive cybersecurity solutions, offering features like ad-blockers, antivirus software, and dark web monitoring. IPVanish offers a feature called Threat Protection Pro, available with the Advanced plan, which protects against malware, ads, and trackers. It enhances online security by blocking ads and tracking scripts, quarantining suspicious downloads, and preventing access to malicious websites. All IPVanish plans include core Threat Protection, utilizing DNS filters to combat trackers and malware across various platforms. Threat Protection Pro, launched in March 2026, provides 24/7 malware and antivirus protection, even when the VPN is not active. This feature is exclusive to Advanced-tier subscribers and currently supports Windows and Mac platforms. It employs VIPRE’s antivirus engine and initiates detailed measures to identify risks at multiple levels. Users can activate Threat Protection Pro through a straightforward setup process on Windows or MacOS. IPVanish allows unlimited devices per subscription and includes DNS and IPv6 leak protection, a kill switch, and a no-logs policy. Advanced users also have access to a Secure Browser for disposable browsing.

AppWizard

May 20, 2026

Herman Miller has finally made a gaming desk, and it costs less than its $2,000 chair

Herman Miller has launched the Coyl gaming desk, marking its entry into the gaming desk market. The desk features a distinctive coiled red power cable that powers its electronic sit-stand adjustable-height legs and an integrated multi-socket extension cord. It includes a cable tray with a flip-down fabric cover for easy access, a pegboard/accessory mount section for various holders, and a dedicated headset hook. The height control system uses a large knurled knob instead of conventional buttons. The desk is available in multiple finishes and comes with a 12-year warranty. The starting price is ,475, and it is currently available for purchase in North America.

Tech Optimizer

May 20, 2026

PoC Exploit Released for 20-Year Old PostgreSQL RCE Vulnerability

A proof-of-concept exploit has been developed for CVE-2026-2005, a remote code execution vulnerability in the pgcrypto extension of PostgreSQL. This vulnerability, stemming from legacy code, allows attackers to trigger a heap-based buffer overflow through specially crafted PGP messages, enabling arbitrary memory read and write operations. Successful exploitation can escalate privileges to PostgreSQL superuser status and execute commands on the operating system. The exploit targets PostgreSQL instances compiled from a specific vulnerable commit and circumvents protections like Address Space Layout Randomization (ASLR). It involves corrupting heap memory structures, leading to a controlled pointer leak that reveals the heap layout. Security researcher Varik Matevosyan has published the PoC on GitHub, demonstrating the exploitation process. The exploit requires a compatible PostgreSQL binary and utilizes Python-based tools for interaction. Organizations are advised to review their PostgreSQL deployments, disable unnecessary extensions, and apply security updates to mitigate risks.

Tech Optimizer

May 20, 2026

PostgreSQL backup tool gets some backup of its own after sole maintainer sounds alarm

A coalition of companies, including AWS, Percona, Supabase, pgEdge, and Tiger Data, has formed to support the maintenance of pgBackRest, an extension for the PostgreSQL database, after its long-time maintainer, David Steele, could no longer continue due to a lack of sponsorship following the acquisition of Crunchy Data by Snowflake. pgBackRest is a backup and restore solution for PostgreSQL, which is widely used by major cloud service providers. Steele had been seeking sponsorship to maintain the project but was unsuccessful, prompting concerns about its future. The coalition aims to provide stability and reduce reliance on a single sponsor by onboarding a new maintainer and seeking additional support. Percona's CEO emphasized the importance of collaboration to ensure the project's health for the community.

Tech Optimizer

May 19, 2026

20-Year-Old PostgreSQL Flaw Gets Public PoC Exploit for Remote Code Execution

A proof-of-concept exploit for CVE-2026-2005 has been released, highlighting a significant vulnerability in the PostgreSQL pgcrypto extension that allows for remote code execution (RCE). This flaw, rooted in legacy code for nearly 20 years, enables attackers to escalate privileges and execute arbitrary commands on compromised servers. The vulnerability is found in the PGP session key parsing logic of the pgcrypto module and involves a heap-based buffer overflow, granting attackers arbitrary read and write access to memory. The exploit, shared by researcher “var77” on GitHub, demonstrates a multi-stage process that bypasses modern security measures like Address Space Layout Randomization (ASLR) using specially crafted PGP messages. The attack involves several steps, including heap pointer leakage, arbitrary memory read, identification of executable memory regions, and privilege escalation to the PostgreSQL superuser level, ultimately allowing the execution of OS-level commands. The vulnerability affects PostgreSQL deployments with the pgcrypto extension enabled, particularly those using vulnerable code versions. Successful exploitation can lead to full database compromise, unauthorized data access or modification, and potential lateral movement within networks. Organizations are advised to update PostgreSQL, restrict pgcrypto usage, limit user privileges, and monitor for unusual activity to mitigate risks.

Tech Optimizer

May 19, 2026

PoC Released for 20-Year Old PostgreSQL RCE Flaw

A public proof-of-concept exploit has been released for CVE-2026-2005, a critical heap-based buffer overflow vulnerability in PostgreSQL's pgcrypto extension, allowing full remote code execution and privilege escalation to the database superuser level. This vulnerability has existed since 2005 and was discovered by an AI-powered security tool during the ZeroDay.Cloud 2025 event in December 2025. An upstream patch was committed on February 8, 2026, and released on February 12, 2026. The vulnerability has a CVSS score of 8.8 and affects approximately 80% of cloud environments using PostgreSQL, with 45% accessible via the internet. The flaw is in the pgp_parse_pubenc_sesskey() function, which lacks bounds checking, allowing attackers to manipulate session key lengths. The pgcrypto extension can be installed by any database role with CREATE privileges, increasing the risk of exploitation. The proof-of-concept exploit involves an information leak, arbitrary write, and privilege escalation to remote code execution. The vulnerability affects all major versions of PostgreSQL prior to the February 2026 releases, which include versions 18.2, 17.8, 16.12, 15.16, and 14.21. Mitigation steps include upgrading to patched versions, restricting CREATE privileges, blocking direct internet exposure, rotating database credentials, auditing the usage of COPY FROM PROGRAM, and verifying patched engine versions for cloud-managed PostgreSQL users.

Tech Optimizer

May 15, 2026

From commit to cloud: Powering what’s next for PostgreSQL

PostgreSQL is widely used across various industries, supported by Microsoft through significant investments, including 345 commits to the latest release and a dedicated team of contributors. It is recognized for its ability to handle complex production challenges, such as transactional integrity and concurrency management. Microsoft operates PostgreSQL globally, informing upstream contributions based on real-world deployment experiences. The database is increasingly integrated into AI applications, with Azure Database for PostgreSQL and Azure HorizonDB focusing on AI functionalities. Microsoft offers multiple deployment models to accommodate different workload needs, including Azure Database for PostgreSQL for open-source workloads and Azure HorizonDB for cloud-native systems. Recent contributions from Microsoft include enhancements in asynchronous I/O, vacuum behavior, and query planning. Azure HorizonDB is designed for high-throughput, low-latency systems requiring horizontal scaling. Microsoft also invests in developer tools, such as a Visual Studio Code extension for PostgreSQL, and sponsors PostgreSQL conferences and user groups globally.

AppWizard

May 13, 2026

Samsung’s drawing app just got a big update on Galaxy devices

Samsung has released an update to the PENUP drawing app, now at version 3.9.22.23, which includes the following new features: - 53 new downloadable brushes. - Dual Brush Feature for combining two brush strokes. - Individual Brush Settings with organized access and preview options. - Export and Import Draft Options using the “.penup” extension for sharing incomplete drawings. - Auto Select Mode for the Lasso selection tool. - Automatic UI Rotation into landscape mode. - File Syncing across devices using a Samsung account. The update is available to all Galaxy device owners using the PENUP app, regardless of One UI version, and can be accessed through the Galaxy Store.