Mapping Archives

AppWizard

June 28, 2026

Nightdive says compatibility with fan missions was a big priority for Thief Remastered, and there’s one massive mod in particular it knew it had to get working

Thief: The Dark Project has a vibrant mapping community known for its creativity and ambition, producing content that often surpasses the original game. Nightdive Studios is remastering the game and emphasizes the importance of fan-created content in this process. A highly anticipated addition is The Black Parade, a fan-made campaign featuring ten missions designed by Romain Barrilliot, which won ModDB's number one mod of the year in 2023. The community is excited about its integration into the remaster, and Nightdive is committed to making fan-favorite missions accessible. Additionally, Eidos Montreal is developing a graphic novel set between the first two games and releasing related merchandise, including a new soundtrack.

Tech Optimizer

June 27, 2026

How AI and Visual Tools Improve PostgreSQL Query Performance and Schema Management

PostgreSQL performance tuning and schema synchronization can be time-consuming and complex, often involving manual queries, EXPLAIN plans, and schema drift. The release of dbForge Studio for PostgreSQL 2026.1 introduces AI-assisted query optimization, a visual query builder, improved schema comparison and synchronization, and a visual table editor. The AI Assistant analyzes database indexes and suggests query optimizations, providing specific recommendations rather than generic advice. The new Query Builder allows users to visually assemble queries, simplifying the process of creating multi-table joins. The Schema Compare feature enables users to compare and synchronize schemas visually, reducing the risk of errors associated with manual synchronization. The visual Table Editor facilitates table design and maintenance, automatically identifying indexes and offering auto-completion for index names. The transition from traditional methods to these new capabilities enhances efficiency, allowing developers to save time on query writing, tuning, and schema changes. The integration of AI and visual tools streamlines workflows and reduces guesswork in performance tuning and schema management.

Winsage

June 25, 2026

Introduction to COM usage by Windows threats

Component Object Model (COM) is a technology in Windows that enables object activation, inter-process communication, and automation across different programming languages. Malware exploits COM interfaces for activities such as lateral movement, execution, downloading, exfiltration, persistence, evasion, system discovery, and automation of Windows and Office functionalities. Reverse engineering COM-heavy binaries involves navigating GUIDs and indirect vtable calls to understand malware mechanics. Research at the AVAR 2025 conference and CARO 2026 workshop discusses methodologies for analyzing COM binaries and case studies of malware families that utilize COM. COM is an application binary interface (ABI) model that allows software components to be reused and enables interaction between different programming languages through interfaces defined at the binary level. Distributed COM (DCOM) allows clients to activate COM objects on remote systems. COM classes are identified by unique class identifiers (CLSIDs), and interfaces by interface identifiers (IIDs). The Windows registry stores COM registration data, with classes and interfaces located under specific keys. Malware often acts as a COM client, utilizing the COM runtime to instantiate classes and request interfaces. ProgIDs provide human-readable registry entries for COM classes. The CoCreateInstance function helps create class objects by resolving CLSID registrations. All COM interfaces derive from IUnknown, which manages object lifetimes and interface querying. COM has its own security model, and identifying classes and interfaces used by malware is crucial for threat researchers. Tools like ComView and OleView.NET assist in inspecting COM registrations. The analysis workflow includes identifying activation API calls, extracting CLSID and IID values, consulting registry definitions, and mapping vtable calls. Qakbot, a banking trojan, exemplifies the use of COM in malware, with its architecture enabling malicious activities like credential theft. Dynamic analysis tools can log COM-related calls in real-time to trace execution flow. Notable malware families that utilize COM include Gh0stRAT, which uses Task Scheduler COM interfaces, and the Attor platform, which employs BITS for file transfers. WarmCookie demonstrates the use of COM for persistence through Task Scheduler. Understanding COM's role in malware is essential for cybersecurity professionals.

Tech Optimizer

June 23, 2026

Active Exploitation of Critical CVE-2026-20253 in Splunk Enterprise: Unauthenticated RCE via PostgreSQL Sidecar Service

A critical security vulnerability, SVD-2026-0603 (CVE-2026-20253), has been identified in Splunk Enterprise versions 10.0.0 through 10.0.6 and 10.2.0 through 10.2.3. This flaw allows unauthenticated, remote attackers to create or truncate arbitrary files on the host system by exploiting the PostgreSQL Sidecar Service endpoints. The vulnerability is actively exploited, with public proof-of-concept code available, and has been added to the CISA Known Exploited Vulnerabilities (KEV) list. Successful exploitation can lead to full remote code execution (RCE) as the Splunk user. The vulnerability arises from inadequate authentication controls on the PostgreSQL Sidecar Service endpoints, specifically /v1/postgres/recovery/backup and /v1/postgres/recovery/restore, which are accessible without authentication. It is classified under CWE-306: Missing Authentication for Critical Function and has a CVSS v3.1 base score of 9.8 (Critical). Attackers can exploit the vulnerability by sending crafted HTTP POST requests to the exposed endpoints, allowing them to create or truncate files and potentially execute malicious scripts. Indicators of compromise include unexpected files in directories such as /tmp/ or /opt/splunk/var/run/supervisor/pkg-run/, modified Splunk Python scripts, and unusual outbound connections from Splunk to unknown PostgreSQL servers. The vulnerability aligns with several MITRE ATT&CK techniques, including T1190 (Exploit Public-Facing Application) and T1059 (Command and Scripting Interpreter). Active exploitation of CVE-2026-20253 has been confirmed, and it is likely that both opportunistic cybercriminals and sophisticated threat actors will use this exploit. The affected versions of Splunk Enterprise are 10.2.0 through 10.2.3 and 10.0.0 through 10.0.6, with the issue resolved in versions 10.2.4 and 10.0.7. Organizations are advised to upgrade to fixed versions or disable the PostgreSQL Sidecar Service as a mitigation strategy.

AppWizard

June 21, 2026

Acoustic mapping app uses thousands of networked old Android phones to hunt Shahed drones — crowd-sourced microphone network spots small, low-RCS military targets

A Lithuanian startup has developed an Android application that allows verified users to monitor for the acoustic signatures of Shahed-type drones used by Russia. The app detects these drones and enables users to report their locations, contributing to a collective defense mechanism. It uses an embedded algorithm to isolate drone sounds from environmental noise and relays detection information to a public map, improving situational awareness. The effectiveness of the system increases with more users running the app. Shahed-type drones are favored in military operations due to their cost-effectiveness. Other nations are also developing countermeasures against drone threats, including microwave drone swarm killers and anti-drone laser systems.

AppWizard

June 21, 2026

Commodore Callback 8020 Retro Flip Phone Runs Android Apps

The Commodore Callback 8020 is a Sailfish OS flip phone designed to block browsers and social media, while retaining essential features like maps, messaging, music, and calls. It operates on Sailfish OS and can run over 99% of Android apps through a sandboxed Android AppSupport layer. The device lacks Google Play Services and the Play Store but comes preloaded with WhatsApp and supports various applications such as Signal, Telegram, and mapping services. It blocks web browsers and major social media applications at the system level, and email and work-related apps are excluded from the app store. The Callback 8020 features a clamshell design, T9-style texting, a 48MP rear camera, FM radio, and comes in multiple retro-inspired finishes. Preorders will start on June 30 at a price of 9.99, with shipping expected to begin in winter.

Winsage

June 16, 2026

Microsoft Teams will auto-detect when you’re at the office via Wi-Fi, roll out confirmed, but you can opt-out

Microsoft is rolling out a feature called "Workplace check-in" that allows organizations to track employee presence in the office through Wi-Fi connectivity, integrated with Microsoft Teams and configured via Microsoft Places. This feature, first noted in September 2025, will not be enabled by default. It logs an employee's location when they connect to the company’s Wi-Fi, such as when they arrive at the office. The rollout was delayed due to privacy concerns, but Microsoft is moving forward, ensuring users can control their participation. The feature does not provide real-time tracking like mapping services but indicates presence based on Wi-Fi connection. Users must grant location access through their operating system, and if they decline, IT policies cannot override this choice. Teams’ Workplace check-in is disabled by default and can be activated by IT administrators with two options: Inform mode, which notifies users of the feature and allows opting out, and Ask mode, which requests permission to share location data. Microsoft clarifies that the feature is not intended for surveillance and does not track movements over time. Employees can choose whether their presence is visible to others while on-site. The initial rollout is tied to organizations using the Microsoft Places directory, and as organizations set up the feature, more users will likely be affected. Additionally, Microsoft is enhancing Teams with improvements for speed and a new user interface for meetings.

AppWizard

June 8, 2026

5 Useful Android Apps For Your Next Camping Trip

Nature is recognized for its soothing effects, and camping can provide a refreshing escape. Five standout Android apps have been identified to enhance camping experiences: 1. The Dyrt: RV & Free Camping - A top-grossing travel app that helps users find public or private camping locations in the U.S. It has a 4.6-star rating and over 32,000 reviews. The app is free to download, with in-app purchases ranging from [openai_gpt model="gpt-4o-mini" prompt="Summarize the content and extract only the fact described in the text bellow. The summary shall NOT include a title, introduction and conclusion. Text: Nature has long been recognized for its soothing effects, often serving as a natural antidote to the stresses of daily life. For those looking to escape into the great outdoors, gathering a few friends and embarking on a camping adventure can be a refreshing experience. Whether you prefer the comfort of an RV or the thrill of pitching a tent in a new location, a selection of Android apps can enhance your next camping trip. Our research, grounded in user reviews, has identified five standout apps that can assist you in discovering new camping spots, checking campsite reviews, and even accessing vital survival information when needed. All of these applications are free to download, with some offering optional in-app purchases or subscription models to unlock additional features. The Dyrt: RV & Free Camping Ranked fourth among top-grossing travel apps on the Google Play Store, The Dyrt: RV & Free Camping is an essential tool for Android users seeking public or private camping locations across the United States. This app caters to various camping styles, whether you’re in a tent, RV, trailer, or cabin. Users can easily filter campgrounds by type or distance and access user-submitted photos and reviews. While the app is free to download, a pro version unlocks additional features, including information on overnight and dispersed parking. The Drive Time feature helps users locate camps within a specified distance, and a pro subscription grants access to offline maps and details for over 50,000 locations. In-app purchases range from .99 to 9.99, and the app boasts a 4.6-star rating with over 32,000 reviews, highlighting its utility in finding public lands and browsing camp reviews, despite some reports of inaccurate coordinates. Clime: NOAA Weather Radar Live For those who prioritize weather updates, Clime: NOAA Weather Radar Live ranks seventh among top-grossing weather apps on the Google Play Store. This app provides live radar data sourced from the National Oceanic and Atmospheric Administration (NOAA), offering real-time weather updates across various regions. Users can access daily weather forecasts, cloud coverage, precipitation levels, wind information, and temperature metrics. Clime also features a storm tracker that sends notifications for bookmarked locations. While the app is free, subscription options are available, with a yearly plan priced at .99. With a 4.2-star rating and over 425,000 reviews, users appreciate its accurate radar coverage, although some express concerns about ads in the free version and the subscription model. Hipcamp: Camping, RVs & Cabins Hipcamp: Camping, RVs & Cabins offers a unique twist on camping apps, allowing users to explore real-time campsite availability across various maps. The app provides alerts for popular destinations and facilitates reservations, making it a practical choice for spontaneous campers. What sets Hipcamp apart is its integration of Bureau of Land Management (BLM), U.S. Forest Services (USFS), and National Park Services (NPS) layers on maps. Users can also find dump stations and electric vehicle charging locations. With over 120,000 private land camping experiences available, the app allows for detailed filtering based on price, amenities, and camping style. Holding a 4.8-star rating with over 14,000 reviews, users commend its ease of use and last-minute booking capabilities, despite some complaints about the 20% non-refundable booking fee. Offline Survival Guide For those venturing into the wilderness, the Offline Survival Guide by Priyo Islam is a treasure trove of information. With a 4.3-star rating and over 50,000 downloads, this app is entirely free and provides essential survival tips categorized for easy access. Covering topics such as fire-building, water procurement, and survival kits, the app is based on an Army field manual, ensuring reliability. Its compact size of just 15 MB makes it accessible for devices running Android 5.0 and up. User reviews praise its comprehensive content and organization, although some mention the presence of ads and express a desire for a dark mode. Given its free nature, it’s a valuable addition for those planning off-grid adventures. iOverlander iOverlander is another noteworthy app, focusing on mapping and user-generated content. It emphasizes real experiences over sponsored information, making it a reliable resource for outdoor enthusiasts. The app helps users locate campsites while also providing information on amenities such as propane, water, and showers, as well as tourist attractions and restaurants. iOverlander allows users to contribute their own destinations and share favorites with fellow travelers. While the app is free to install, subscription options range from .99 to .99 per item, offering access to satellite maps and additional overlays. With a 4.3-star rating and over 7,760 reviews, users appreciate its extensive resources, although some have reported issues with the map interface and subscription model. Notably, users can earn a free subscription by contributing information, enhancing its appeal. How we selected these camping apps The selection of these camping apps was guided by actual user reviews on the Google Play Store, ensuring each app maintained a minimum 4-star rating based on extensive feedback. We considered both positive and negative user experiences, prioritizing apps that offer free trials to allow users to explore features before committing financially. This approach ensures that campers can make informed choices for their outdoor adventures." max_tokens="3500" temperature="0.3" top_p="1.0" best_of="1" presence_penalty="0.1" frequency_penalty="frequency_penalty"].99 to .99. 2. Clime: NOAA Weather Radar Live - A weather app providing live radar data from NOAA, with daily forecasts and storm tracking. It has a 4.2-star rating and over 425,000 reviews. The app is free, with subscription options available. 3. Hipcamp: Camping, RVs & Cabins - This app shows real-time campsite availability and allows reservations. It has a 4.8-star rating and over 14,000 reviews. The app is free, but there is a 20% non-refundable booking fee. 4. Offline Survival Guide - A survival information app with a 4.3-star rating and over 50,000 downloads. It is free and provides essential survival tips based on an Army field manual. 5. iOverlander - An app focusing on user-generated content for locating campsites and amenities. It has a 4.3-star rating and over 7,760 reviews. The app is free to install, with subscription options available. The selection of these apps was based on user reviews from the Google Play Store, ensuring each maintained a minimum 4-star rating.

Tech Optimizer

June 6, 2026

PostgreSQL vs SQL Server 2026: $0 vs $15K License

PostgreSQL has become the most utilized database for developers for two consecutive years as of 2026, while SQL Server has introduced native AI capabilities and vector search functionalities in its latest release. PostgreSQL is favored for new projects due to its permissive licensing, cross-platform operation, and extensive ecosystem of extensions, whereas SQL Server is preferred by organizations already using Microsoft products for its robust tooling and enterprise support. As of June 2026, SQL Server ranks third in the DB-Engines popularity ranking with a score of 698, while PostgreSQL ranks fourth with a score of 688. Developer adoption trends show that 49% of respondents in the Stack Overflow 2024 Developer Survey use PostgreSQL, compared to 27% for SQL Server. The latest stable version of PostgreSQL is 18.4, released on May 14, 2026, while SQL Server 2025 (version 17.x) became generally available on November 18, 2025. PostgreSQL is free under a permissive license, while SQL Server's Enterprise Edition can cost upwards of ,123 per two-core pack, with an eight-core minimum. PostgreSQL supports various operating systems, including Linux, Windows, macOS, and BSD, while SQL Server operates on Windows and Linux. PostgreSQL uses PL/pgSQL as its primary procedural language, allowing for multiple procedural languages, whereas SQL Server uses T-SQL. PostgreSQL's JSONB type offers rich indexing, while SQL Server added native JSON support in its 2025 release. Both databases are capable of handling high transaction volumes, but PostgreSQL excels in read-heavy scenarios due to its multi-version concurrency control, while SQL Server's columnstore indexes provide advantages for analytical workloads. PostgreSQL supports tables up to 32 TB, while SQL Server can handle a maximum database size of 524 PB. SQL Server's high availability technology includes Always On Availability Groups, while PostgreSQL offers built-in streaming and logical replication. The security features of both databases meet enterprise standards, with PostgreSQL providing a transparent patching process and SQL Server integrating with Microsoft tools. Real-world usage examples include Stack Overflow using SQL Server, while Instagram and Reddit utilize PostgreSQL. Developer sentiment increasingly favors PostgreSQL for new projects, emphasizing flexibility and open-source solutions. For new startups or greenfield projects, PostgreSQL is recommended due to its zero license cost and compatibility. Existing Microsoft enterprises are advised to stick with SQL Server for its integration benefits. Migration from SQL Server to PostgreSQL is becoming common, with a structured approach required for successful transitions.

AppWizard

June 6, 2026

Android Spyware Asin Targets Arabic Users via Fake News, PDF and War Map Apps

Arabic-speaking users are the target of a new Android spyware called Asin, identified by ESET in early 2025. The malware is distributed through fraudulent websites that mimic legitimate services, including: - govlens[.]net, registered on May 27, 2025, impersonating a government news source. - pdf-reader[.]help, registered on May 29, 2025, claiming to be a secure PDF editor. - live-war-map[.]com, registered on January 20, 2025, providing updates on military incidents. Two of these domains are promoted via social media accounts on Facebook and Telegram. The spyware combines legitimate functionality with covert capabilities, and its campaigns may target journalists and OSINT researchers in Arabic-speaking regions. Artifacts linked to Asin include an upload to VirusTotal from Türkiye in October 2025, an APK downloaded from c-pdf[.]net in December 2025, and a sample disguised as "Syria Defense Map" detected in January 2026. Users must manually install the applications and grant permissions for the spyware to operate.