NewApp Digest
search bot

language models

Inside the Architecture of an MCP Server for PostgreSQL
Tech Optimizer
April 30, 2026

Inside the Architecture of an MCP Server for PostgreSQL

The Model Context Protocol (MCP) serves as a standard interface between large language models (LLMs) and external systems like PostgreSQL, emphasizing the importance of control over mere connectivity. An MCP server must act as a mediation and policy layer, enforcing security boundaries and ensuring that connections default to read-only. It should validate AI-generated SQL as untrusted input, encapsulate queries within transactions, and apply execution-time controls. The server must separate query generation from execution approval to manage operational costs and enforce guardrails on query types, such as limiting the number of rows returned. Token efficiency is crucial, with design considerations for compact data representation and schema introspection. In production, connection management is vital to prevent data leakage among multiple AI agents, and observability through logging executed queries and metadata is necessary for debugging and compliance. Long-running sessions require support for paginated responses to manage context effectively. Overall, the MCP server must integrate security, query safety, token efficiency, and observability into its design from the outset.
GPT-5.5 topped a Minecraft building benchmark and the spatial reasoning implications go far beyond gaming
AppWizard
April 25, 2026

GPT-5.5 topped a Minecraft building benchmark and the spatial reasoning implications go far beyond gaming

GPT-5.5 has achieved an xHigh tier result on VoxelBench, placing it at the top of a leaderboard that includes Grok 4.20 Beta, Kimi K2.5 Thinking, and Kimi K2.6. VoxelBench evaluates language models on their ability to construct three-dimensional voxel structures from text prompts, requiring models to translate verbal descriptions into precise 3D objects without images or post-processing. Human evaluators rated GPT-5.5's constructions higher than those of other models tested. Research indicates that producing spatially correct outputs is significantly more challenging than generating executable code, with geometric construction and multi-object composition being the hardest tasks. The MineBench Elo system, calibrated against skilled human Minecraft builders, shows that frontier models are approaching human-level spatial reasoning capabilities, which have implications for fields such as architecture and game development. The VoxelBench leaderboard reflects a competitive landscape where multiple models are achieving similar performance levels, indicating a shift in the AI benchmark landscape. GPT-5.5's results suggest that AI-assisted 3D design workflows may soon be viable, highlighting a transition from capability to integration challenges in the development of AI tools for design applications.
Trojanized Android App Fuels New Wave of NFC Fraud
AppWizard
April 21, 2026

Trojanized Android App Fuels New Wave of NFC Fraud

A new variant of the NGate malware family has emerged, using a trojanized Android application to capture payment card data and personal identification numbers (PINs). This modified version of HandyPay, a legitimate NFC relay app, has been distributed since November 2025, primarily targeting users in Brazil. The malware intercepts NFC payment card data and allows fraudulent transactions. Two distinct malware samples have been observed, delivered through phishing infrastructure that impersonates a Brazilian lottery site and a Google Play listing for a card protection tool. The trojanized app captures NFC data, requests the victim's card PIN, and transmits this information to attacker-controlled infrastructure. It requires minimal permissions, leveraging its role as the default payment application to evade detection. Evidence suggests that generative AI tools may have been used in its development, indicated by emoji markers in debug logs. ESET has reported its findings to Google, and Google Play Protect can detect known versions of the malware. The developer of HandyPay is investigating the misuse of its application.
New NGate Android malware variant uses NFC app to steal card data
AppWizard
April 21, 2026

New NGate Android malware variant uses NFC app to steal card data

A new variant of the NGate Android malware exploits a legitimate NFC payment app, HandyPay, to steal users' card information and PINs, enabling unauthorized contactless transactions. This malicious version of HandyPay, which has been available since 2021, was identified by ESET researchers and is distributed through a fraudulent lottery website and a fake Google Play page. The malware captures sensitive information by prompting users to enter their payment card PIN and tap their card against the device, sending the data to an attacker-controlled phone and exfiltrating the PIN to a command-and-control server. The campaign employs social engineering tactics and requires minimal permissions, relying on users to enable app installations from unknown sources. The attackers use a centralized infrastructure for malware distribution and PIN collection, with evidence of compromised devices in Brazil. The shift to modifying a legitimate application is motivated by financial incentives, as it offers similar functionality at a lower cost compared to underground tools. Users are advised to avoid installing apps from unofficial sources and to ensure the legitimacy of applications before entering sensitive information.
EDB Spearheads the Year of the Agentic Workforce with Industry Recognition, Ecosystem Momentum, and Continued Postgres® Leadership
Tech Optimizer
April 17, 2026

EDB Spearheads the Year of the Agentic Workforce with Industry Recognition, Ecosystem Momentum, and Continued Postgres® Leadership

EnterpriseDB (EDB) announced that its product, EDB Postgres AI (EDB PG AI), won the "Data Management Innovation of the Year" at the 2026 Data Breakthrough Awards. EDB PG AI is recognized for transforming Postgres into a unified data and AI platform, facilitating hybrid management and observability across workloads. EDB contributes 30% to the open-source Postgres project, leading contributions among commercial entities. EDB PG AI was highlighted at the NVIDIA GTC 2026 and received multiple accolades, including recognition in CRN's 2026 AI 100 and Sustainability Innovation of the Year. EDB hosts a podcast, AI & Data Horizons, featuring industry experts discussing responsible AI use and data sovereignty. EDB PG AI is described as the first open, enterprise-grade sovereign data and AI platform, capable of unifying various workloads while ensuring compliance and security.
Veteran Windows dev shows off AI running on 47-year-old PDP11 with 6 MHz CPU and 64KB of RAM — 'gloriously absurd' project runs transformer model written in PDP-11 assembly language
Winsage
April 14, 2026

Veteran Windows dev shows off AI running on 47-year-old PDP11 with 6 MHz CPU and 64KB of RAM — ‘gloriously absurd’ project runs transformer model written in PDP-11 assembly language

Veteran Windows developer Dave Plummer is using a 47-year-old PDP-11 system with a 6 MHz CPU and 64KB of RAM to train a neural network called ‘Attention 11,’ developed in PDP-11 assembly language. The model is tasked with reversing a sequence of eight digits, requiring it to understand structural rules similar to those used in contemporary large language models like ChatGPT. Plummer emphasizes the importance of optimizing for the system's constraints, stating that constraints drive creative engineering. The model operates with 1,216 parameters and uses fixed-point math with 8-bit precision. After approximately 350 training steps, the model achieved 100% accuracy in the number-reversing task in about 3.5 minutes. Plummer argues that modern AI operates on the same mechanical principles as this vintage machine, just at a much larger scale, and suggests that companies focusing on efficiency and optimization may gain an advantage in the AI landscape.
Veteran indie developer scared to reveal new game in case it gets "slurped up by AI"
AppWizard
April 6, 2026

Veteran indie developer scared to reveal new game in case it gets “slurped up by AI”

Lucas Pope is a notable game developer known for creating "Papers, Please" and "The Return of the Obra Dinn." He has since worked on smaller projects, including Mars After Midnight, but has not released anything on Steam recently. During a podcast, Pope expressed concerns about the impact of artificial intelligence on game development, particularly regarding idea theft and the potential for his work to be copied or imitated. He feels uneasy discussing ongoing projects due to these risks and reflects on the pressure of following up his previous successes. Despite these worries, Pope's reputation allows him to avoid some challenges faced by less-known developers, and his next project is expected to generate significant interest.
z3soft sets a new standard in the security market with next-generation integrated security solutions
Tech Optimizer
April 5, 2026

z3soft sets a new standard in the security market with next-generation integrated security solutions

z3soft is developing the Agentic Security Platform (ASP), which integrates large language models, antivirus solutions, and comprehensive file security to shift from passive to proactive cybersecurity measures. CEO Park Ju-seon highlights the need for a broader market strategy to address challenges in the domestic security market, which is dominated by a few players. The ASP aims to combine legacy security systems with AI technology for enhanced security management. z3soft is focusing on creating a 'cyber immunity' solution for AI environments, integrating Zero Trust principles for data protection. The company plans to foster an integrated security ecosystem through partnerships with smaller firms and aims to make advanced security solutions accessible to small and medium-sized enterprises (SMEs) via a subscription model. z3soft intends to validate its business model in Japan and the U.S. before introducing it to South Korea, with goals set for market entry by 2027 and the launch of zero-trust firewalls in Japan and an integrated security platform in the U.S. Park anticipates that significant changes in the domestic market may take five to ten years.
Search