Extension Archives

Winsage

July 12, 2026

Microsoft wants to integrate your smartphone more natively across Windows 11’s user experience

Microsoft is enhancing the Windows 11 user experience by improving the integration of smartphones through significant upgrades to the Phone Link feature. Key upgrades include enhancements to the Phone Companion feature in the Start menu, allowing users to view recent activities and notifications without launching the app. A new smartphone flyout will be tested in the Taskbar's system tray, displaying a phone icon for connected devices and offering quick access to settings and file sharing. Clipboard history synchronization between the phone and PC is also being considered, enabling users to access a comprehensive list of copied content. Additionally, a standalone Messages app for Windows 11 is in development, allowing users to sync SMS conversations and respond directly from their PC. These features are in the exploration and prototyping stages, with feedback from Insiders expected before any final decisions are made. Microsoft aims to create a cohesive ecosystem where smartphones and PCs work seamlessly together.

Winsage

July 12, 2026

Microsoft wants to integrate your smartphone more deeply with Windows 11: Plans major UX enhancements that will make your PC and phone more seamlessly connected

Microsoft is enhancing the Windows 11 shell and user experience by integrating smartphone features more seamlessly. Significant upgrades are planned for Phone Link, which will evolve into a more native experience. The Phone Companion feature in the Start menu will allow users to view recent activities without launching the Phone Link app, enabling easy scrolling and detailed information on hover. A new smartphone flyout is being tested for the system tray, featuring a phone icon that provides an overview of the phone's status and quick access to functions like Do Not Disturb and file sharing. These features are in the exploratory stages, reflecting Microsoft's commitment to integrating Phone Link capabilities into Windows, allowing access to phone files and using the phone's camera as a webcam.

Tech Optimizer

July 12, 2026

Running pgvector in production on Amazon Aurora PostgreSQL

Running pgvector on Amazon Aurora PostgreSQL-Compatible Edition offers a vector store with operational capabilities, high availability, and scalability. It is favored for Retrieval Augmented Generation (RAG) workloads transitioning to production, but increased traffic introduces challenges like query latency and memory management. Key operational practices for pgvector workloads include selecting the appropriate index type (HNSW or IVFFlat), establishing a baseline schema, choosing a suitable distance operator, scaling the index through quantization and partitioning, and preparing for churn and observability. The prerequisites for using pgvector include an Aurora PostgreSQL-Compatible cluster with specific PostgreSQL versions and the vector extension enabled. The embedding model used in examples is Amazon Titan Text Embeddings V2, which produces 1024-dimensional embeddings. pgvector supports two Approximate Nearest Neighbor (ANN) index types: HNSW, which is efficient for querying and allows for incremental insertions, and IVFFlat, which is less resource-intensive but requires rebuilding if data changes. There are scenarios where forgoing an index is beneficial, such as small datasets or partitioned datasets requiring 100% recall. A baseline schema for a multi-tenant document store includes creating a table for documents with an embedding vector and establishing indexes for tenant IDs and embeddings using HNSW. The recommended parameters for HNSW include m = 16 and ef_construction = 128. Scaling to millions of vectors involves quantization, tuning HNSW parameters, and partitioning. Aurora Optimized Reads can extend effective cache capacity, and managing index churn is crucial for maintaining performance. Observability metrics include query-level statistics, instance-level metrics, and custom application-defined metrics. To clean up after testing, it is advisable to drop the created indexes and tables, and delete the Aurora PostgreSQL-Compatible cluster and any manual snapshots taken during testing.

Tech Optimizer

July 10, 2026

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

Microsoft Threat Intelligence has identified the GigaWiper malware, which has been detected in compromised environments since October 2025. This malware has destructive capabilities and comes in two forms: standalone wiper binaries and larger binaries with backdoor functionalities, both developed in Golang. The standalone wiper operates at the physical disk level, overwriting disk content and removing partition references. The backdoor variant includes the same wiper functionality and adds persistence through a registry key and scheduled tasks, along with command and control communication via RabbitMQ and Redis. GigaWiper can execute various commands, including wiping drives, triggering a Blue Screen of Death (BSOD), file encryption that mimics ransomware behavior, and managing system elements. The malware integrates components from multiple malware families, including wipers and ransomware mechanisms, and has been linked to a previous malware known as FlockWiper. To defend against GigaWiper, organizations are advised to implement security measures such as tamper protection, blocking access to known C2 infrastructure, and utilizing endpoint detection and response solutions. Microsoft Defender provides detections for GigaWiper and related malware, and threat intelligence reports are available for customers to stay informed about threats. Indicators of compromise include specific SHA-256 hashes and IP addresses associated with GigaWiper.

Winsage

July 10, 2026

Microsoft Warns of GigaWiper Backdoor Built to Destroy Windows PCs

Microsoft has unveiled a destructive Windows backdoor named GigaWiper, which allows operators remote control over compromised systems to execute irreversible damage. GigaWiper originated from cyberattacks in October 2025 and is a composite of code from at least three malware families. It maintains its presence through a scheduled task disguised as “OneDrive Update,” executing at startup and every minute. GigaWiper can obliterate partition information, overwrite physical drives, and restart systems. It also mimics ransomware by encrypting files with the .candy extension, using randomly generated keys that are not stored, making recovery impossible. The malware has connections to the Crucio ransomware and resembles FlockWiper, with rewritten code in Go. GigaWiper features 20 command codes for various functions, including executing PowerShell instructions, managing processes, capturing screenshots, and remote access similar to VNC. It can remain on a system for surveillance until its destructive functions are activated. Microsoft Defender includes detection capabilities for GigaWiper, and users are advised to enable tamper protection and monitor for suspicious activities.

Tech Optimizer

July 8, 2026

PostgreSQL Extensions Are an Architecture Decision, Not an Afterthought

A common issue in database migrations is the unplanned accumulation of extensions in PostgreSQL, leading to extension sprawl. Teams often install extensions without documenting the rationale, resulting in a complex web of dependencies that complicates future upgrades and removals. The installation process involves PostgreSQL accessing a control file that details the extension's version and dependencies, which can lead to multiple extensions being installed unintentionally. Upgrading and removing extensions are often neglected, causing risks such as the loss of dependent objects. Extensions typically default to the public schema, which can become cluttered; relocating them to dedicated schemas can improve organization. Trusted Language Extensions (TLE) allow non-privileged users to utilize procedural languages in managed databases without needing superuser access. Key extensions recommended for use include pg_stat_statements, pg_trgm, hstore, citext, and PostGIS, each serving specific use cases. Proper governance is essential for managing extensions, including documenting their purpose, ownership, and dependencies, to prevent operational surprises.

AppWizard

July 7, 2026

Chat Control 1.0: EU Council forces messenger scans via fast-track

Member states of the European Union are seeking to reinstate a previously expired regulation concerning the monitoring of encrypted communications, known as Chat Control 2.0, which mandates suspicionless scanning of encrypted messages. The Council of Ministers has proposed to reactivate a transitional regulation that allowed voluntary monitoring by technology companies, which lapsed on April 3. This move aims to close a legal gap and pressure Members of the European Parliament (MEPs) to act quickly. The expiration of the previous regulation is viewed as untenable, as it is deemed crucial for identifying at-risk children and combating illegal content online. Critics argue that the approach undermines democratic oversight and lacks transparency. The draft regulation is set to be discussed as an urgent matter just before the summer recess, with potential voting occurring when many MEPs may be absent. The regulation requires that any processed content and traffic data be deleted within twelve months unless a specific suspicion is confirmed.

Tech Optimizer

July 7, 2026

PDO PostgreSQL Bug Triggers NULL Pointer Dereference and Crashes PHP Worker Processes

Researchers at Positive Technologies have identified two significant vulnerabilities in the PHP Data Objects (PDO) extension layer, both posing high severity risks. The first vulnerability (CVE-2025-14180) leads to a NULL pointer dereference, causing PHP worker processes to crash. It affects PHP versions 8.1.x prior to 8.1.34, 8.2.x before 8.2.30, 8.3.x before 8.3.29, 8.4.x before 8.4.16, and 8.5.x before 8.5.1. This issue occurs when the pdo_pgsql driver operates with PDO::ATTR_EMULATE_PREPARES enabled, allowing a remote attacker to exploit it without authentication by submitting malformed character sequences. The second vulnerability (CVE-2025-14179) allows for SQL injection and affects PHP versions 8.2.x before 8.2.31, 8.3.x before 8.3.31, 8.4.x before 8.4.21, and 8.5.x before 8.5.6. It arises from a mishandling of NUL bytes in the Firebird driver during the PDO::prepare() process, despite the quoting routine functioning correctly. Additionally, the audit revealed an integer overflow in PostgreSQL’s libpq client library and an information disclosure flaw in Firebird 3’s fbclient.

Winsage

July 6, 2026

Microsoft just broke custom folder icons in Windows, and the reason is a bug from 2003

Microsoft has updated Windows to stop trusting untrusted desktop.ini files, a change aimed at addressing a long-standing security vulnerability that has existed since 2003. This decision affects the display of custom folder icons, as Windows will now ignore customization metadata from potentially unsafe sources. Users can still use custom folder icons if the desktop.ini file and icon resources come from trusted locations. A workaround allows users to manually create a desktop.ini file with the desired icon while following new security protocols.

Winsage

July 6, 2026

Microsoft just confirmed that this Windows 11 bug is hoarding up to 500GB of your storage

Microsoft has acknowledged a storage issue related to the Capability Access Manager service in Windows 11, which can consume up to 500GB of SSD space due to a bug causing the log file, CapabilityAccessManager.db-wal, to inflate to gigabytes instead of a few megabytes. Users have reported file sizes reaching 200GB and even 513GB. The issue can be checked via Settings > Storage > System & reserved or by using a command in the Windows Command Prompt. Microsoft plans to address this in the June KB5095093 update, which will improve disk space usage for the log file, with updates expected to roll out starting July 14.