NewApp Digest
search bot

logging

Your free VPN on Android often offers less protection than you might think
AppWizard
July 12, 2026

Your free VPN on Android often offers less protection than you might think

The MVPNalyzer Study conducted by researchers at the University of Michigan analyzed various VPN services, focusing on their performance metrics, data privacy practices, and effectiveness in bypassing geographical restrictions. The study revealed that some VPNs excel in speed while others prioritize security features, and not all services provide the same level of data protection, with certain logging practices raising concerns. The findings encourage users to closely examine VPN services regarding speed, privacy policies, and data management, while urging VPN providers to improve transparency and invest in user security technologies.
GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware
Tech Optimizer
July 10, 2026

GigaWiper: Anatomy of a destructive backdoor assembled from multiple malware

Microsoft Threat Intelligence has identified the GigaWiper malware, which has been detected in compromised environments since October 2025. This malware has destructive capabilities and comes in two forms: standalone wiper binaries and larger binaries with backdoor functionalities, both developed in Golang. The standalone wiper operates at the physical disk level, overwriting disk content and removing partition references. The backdoor variant includes the same wiper functionality and adds persistence through a registry key and scheduled tasks, along with command and control communication via RabbitMQ and Redis. GigaWiper can execute various commands, including wiping drives, triggering a Blue Screen of Death (BSOD), file encryption that mimics ransomware behavior, and managing system elements. The malware integrates components from multiple malware families, including wipers and ransomware mechanisms, and has been linked to a previous malware known as FlockWiper. To defend against GigaWiper, organizations are advised to implement security measures such as tamper protection, blocking access to known C2 infrastructure, and utilizing endpoint detection and response solutions. Microsoft Defender provides detections for GigaWiper and related malware, and threat intelligence reports are available for customers to stay informed about threats. Indicators of compromise include specific SHA-256 hashes and IP addresses associated with GigaWiper.
DBA2: Configuration and Monitoring of PostgreSQL 16 is now available in English
Tech Optimizer
July 9, 2026

DBA2: Configuration and Monitoring of PostgreSQL 16 is now available in English

Postgres Professional has translated the DBA2: Configuration and Monitoring of PostgreSQL 16 course into English. This four-day program is designed for PostgreSQL administrators with basic Unix skills and knowledge equivalent to the DBA1 course. The curriculum covers topics such as Multi-Version Concurrency Control (MVCC), isolation levels, vacuuming, buffer cache management, write-ahead logging (WAL), and server upgrades. Participants will learn to configure PostgreSQL parameters, monitor the server, manage localization settings, and handle extensions. The course materials include a student guide for setting up a virtual machine and performing practical tasks. The translation was done by Elena Sharafutdinova, with assistance from Ilya Bashtanov and Alexander Meleshko.
PostgreSQL Extensions Are an Architecture Decision, Not an Afterthought
Tech Optimizer
July 8, 2026

PostgreSQL Extensions Are an Architecture Decision, Not an Afterthought

A common issue in database migrations is the unplanned accumulation of extensions in PostgreSQL, leading to extension sprawl. Teams often install extensions without documenting the rationale, resulting in a complex web of dependencies that complicates future upgrades and removals. The installation process involves PostgreSQL accessing a control file that details the extension's version and dependencies, which can lead to multiple extensions being installed unintentionally. Upgrading and removing extensions are often neglected, causing risks such as the loss of dependent objects. Extensions typically default to the public schema, which can become cluttered; relocating them to dedicated schemas can improve organization. Trusted Language Extensions (TLE) allow non-privileged users to utilize procedural languages in managed databases without needing superuser access. Key extensions recommended for use include pg_stat_statements, pg_trgm, hstore, citext, and PostGIS, each serving specific use cases. Proper governance is essential for managing extensions, including documenting their purpose, ownership, and dependencies, to prevent operational surprises.
Microsoft fixes storage-hogging Windows 11 folder
Winsage
July 7, 2026

Microsoft fixes storage-hogging Windows 11 folder

Microsoft has released an optional update, KB5095093, in June 2026 to address a storage issue affecting Windows 11 users related to the CapabilityAccessManager.db-wal file, which manages app permissions. Users have reported the file size increasing significantly, with some reaching up to 500GB, due to continuous logging of access requests and privacy controls. To install the update, users should go to Settings, select “Windows Update,” then “Advanced options,” and check for optional updates.
Search