infrastructure Archives

Tech Optimizer

April 27, 2026

Why developers are betting on Postgres for AI

Organizations are intensifying the development of AI applications and agents, which rely on access to existing enterprise data to avoid inaccuracies in responses, a phenomenon known as "hallucination." Jensen Huang, CEO of Nvidia, and Phillip Merrick, co-founder of pgEdge, emphasize that structured data is essential for AI effectiveness. PostgreSQL is highlighted as a preferred database for AI applications, with 66% of respondents in the Stack Overflow 2025 Developer Survey indicating they wish to continue using it. Merrick notes PostgreSQL's advantages, including its open-source model, scalability, and ability to handle both structured and unstructured data. The pgEdge toolkit supports the entire lifecycle of AI application development, including document ingestion and vector embedding generation. PostgreSQL offers deployment flexibility and robust security features, making it suitable for critical sectors like finance and healthcare.

Tech Optimizer

April 26, 2026

CanisterSprawl: pgserve Compromised on npm: Malicious Versions Harvest Credentials and Exfiltrate to a Decentralized ICP Canister

On April 21, 2026, compromised versions of pgserve (1.1.11, 1.1.12, and 1.1.13) were published on npm, containing a 1,143-line credential-harvesting script that executes during the postinstall phase of npm install. The malware functions as a supply-chain worm, reinjecting itself into other packages if it finds an npm publish token. Stolen credentials are encrypted using RSA-4096 and AES-256 and exfiltrated to a decentralized Internet Computer Protocol (ICP) canister. The last legitimate release was v1.1.10, published on April 17, 2026. The malware was detected by StepSecurity AI Package Analyst and Harden Runner, which flagged the compromised versions as Critical / Rejected and confirmed live exfiltration during analysis. The injected script performs operations such as harvesting environment variables, collecting filesystem secrets, encrypting payloads, and propagating to other npm packages and Python packages if a PyPI token is detected. The exfiltration domains have been added to a global block list.

Tech Optimizer

April 25, 2026

Telangana Migrates MeeSeva to Open-Source PostgreSQL, Cuts ₹10 Crore Annual Cost

The Telangana government has transitioned its MeeSeva platform from Oracle to the open-source PostgreSQL database, announced by Ravikiran Tirumala, Commissioner of Electronic Services Delivery. MeeSeva processes over 80,000 government-to-citizen transactions daily, totaling nearly 20 crore transactions since its inception. The migration, using the open-source tool “ora2pg,” took less than four hours of downtime. The annual cost of Oracle licensing and maintenance was around ₹10 crore, while the migration cost was under ₹1 crore, leading to estimated recurring annual savings of about ₹10 crore. PostgreSQL has effectively managed high transaction volumes without performance issues. Telangana plans to document and share its migration process to encourage the adoption of open-source technologies in other government systems.

AppWizard

April 25, 2026

GPT-5.5 topped a Minecraft building benchmark and the spatial reasoning implications go far beyond gaming

GPT-5.5 has achieved an xHigh tier result on VoxelBench, placing it at the top of a leaderboard that includes Grok 4.20 Beta, Kimi K2.5 Thinking, and Kimi K2.6. VoxelBench evaluates language models on their ability to construct three-dimensional voxel structures from text prompts, requiring models to translate verbal descriptions into precise 3D objects without images or post-processing. Human evaluators rated GPT-5.5's constructions higher than those of other models tested. Research indicates that producing spatially correct outputs is significantly more challenging than generating executable code, with geometric construction and multi-object composition being the hardest tasks. The MineBench Elo system, calibrated against skilled human Minecraft builders, shows that frontier models are approaching human-level spatial reasoning capabilities, which have implications for fields such as architecture and game development. The VoxelBench leaderboard reflects a competitive landscape where multiple models are achieving similar performance levels, indicating a shift in the AI benchmark landscape. GPT-5.5's results suggest that AI-assisted 3D design workflows may soon be viable, highlighting a transition from capability to integration challenges in the development of AI tools for design applications.

AppWizard

April 25, 2026

Android Hackers Target 800 Banking, Crypto and Social Media Apps With ‘Near-Zero Detection Rates’: Zimperium

Android hackers are targeting over 800 applications in banking, cryptocurrency, and social media sectors, utilizing four active malware families: RecruitRat, SaferRat, Astrinox, and Massiv. These malware employ advanced techniques to evade detection and execute credential theft, unauthorized financial transactions, and data exfiltration. Attackers lure victims through phishing websites, fraudulent job offers, fake software updates, text-message scams, and promotional lures. Once installed, the malware can request Accessibility permissions, obscure app icons, obstruct uninstallation, and steal sensitive information through counterfeit lock screens. They can also capture one-time passcodes, stream device screens, and overlay fake login pages on legitimate applications. The malware uses HTTPS and WebSocket communications to blend malicious traffic with normal activity and may incorporate encryption layers to avoid detection.

AppWizard

April 24, 2026

Another spyware maker caught distributing fake Android snooping apps

The Italian digital rights organization Osservatorio Nessuno has revealed a new malware called Morpheus, used by government agencies for surveillance. Morpheus is disguised as a phone updating application and can extract various data from targets' devices. The spyware is linked to IPS, an Italian firm specializing in lawful interception technologies, which claims to operate in over 20 countries. Morpheus is categorized as "low cost" due to its straightforward infection method, which involves tricking targets into installing the software. Authorities collaborated with the target's mobile service provider to obstruct data and send an SMS prompting the installation of the malware. Once installed, Morpheus exploits Android's accessibility features to access extensive information and masquerades as the WhatsApp application to solicit biometric data. The spyware's code contains Italian phrases and references to "Gomorra," indicating its connection to the Italian spyware industry. The attack is likely linked to political activism in Italy. IPS is among several Italian spyware manufacturers that have emerged following the decline of Hacking Team.

Winsage

April 23, 2026

Microsoft faces court battle in £2bn Windows Server class action

The Competition Appeal Tribunal (CAT) has approved a £2 billion class action against Microsoft, aimed at compensating approximately 59,000 businesses using the Windows Server operating system in non-Microsoft public clouds. The collective action, led by Maria Luisa Stasi, alleges that Microsoft has overcharged UK entities for Windows Server on competing cloud services. The tribunal dismissed Microsoft's objections and granted a Collective Proceedings Order on an opt-out basis. The class action addresses two main issues: pricing abuse related to the Microsoft Service Provider License Agreement (SPLA) and re-licensing abuse concerning the deployment of Windows Server on Azure versus other cloud providers. The UK Competition and Markets Authority is also investigating Microsoft's software licensing practices within the cloud market. James Hain-Cole from law firm Scott+Scott expressed satisfaction with the tribunal's decision, emphasizing its significance for securing compensation for affected businesses.

AppWizard

April 23, 2026

Binance’s Android app is quietly running TikTok and WeChat SDKs alongside 13 other trackers

Security researchers have found that the Binance Android app includes SDKs from ByteDance and Tencent, along with 13 additional third-party trackers. This raises privacy concerns for users, as the TikTok SDK collects device fingerprints, behavioral signals, and potentially clipboard data, while the WeChat SDK adds functionalities not necessary for a financial trading platform. The incorporation of these SDKs could expose sensitive financial information. Under EU GDPR and FTC regulations, undisclosed telemetry in financial apps may be considered deceptive trade practices, potentially leading to regulatory repercussions for Binance. Users are advised to revoke permissions from the app or switch to the browser-based platform. The situation could prompt regulatory scrutiny and audits of cryptocurrency asset management apps.

AppWizard

April 23, 2026

Transport Fever 3 brings modders in early to start the new city builder on the right foundations

Urban Games is preparing for the launch of Transport Fever 3 by inviting creators to participate in early access through a closed beta initiative called the 'Curated Mods Program.' The game, set to launch in late 2026, will enhance features from its predecessor, Transport Fever 2, and will include expanded infrastructure tools and financial systems. Transport Fever 2 has over 15,000 mods available on the Steam Workshop, and Transport Fever 3 aims to offer an even more robust toolset for modders, with cross-platform mods accessible through an in-game Mod Hub. The developer is particularly interested in collaborating with experienced modders and plans to expand the Curated Mods Program post-launch, providing resources and financial grants to support ongoing content creation.

Winsage

April 22, 2026

Windows 365 Link: One year of the simple, secure, purpose-built Cloud PC device

Windows 365 Link, a service launched a year ago, enhances the Windows 365 experience by providing a cloud-based Windows environment that is easy to manage, secure, and cost-effective. It allows organizations to scale Cloud PCs without local data or applications. Over the past year, it has expanded into new regions and industries such as manufacturing, healthcare, retail, and professional services. Organizations using Windows 365 Link have reported benefits like reduced management burdens and seamless access for workers. The partner network has grown to over 200 resellers in 20 countries, facilitating quick deployment. Upcoming updates include support for Bluetooth device pairing, tenant branding, USB redirection, and visibility into pending updates on sign-in screens.