monitor Archives

AppWizard

April 26, 2026

“Average Steam Deck framerate” graph shows PC game developers how their Verified titles really run on Valve’s handheld — Will users ever see this data

Valve has introduced new beta Steamworks tools for game developers as part of its Steam Deck Verified Games initiative. These tools allow developers to monitor average framerates over the past 30 days and access user survey results regarding the Verified status of their games. Participation in data collection is opt-in, ensuring user privacy. The user survey appears after at least ten minutes of gameplay, allowing users to agree or disagree with a game's Verified status and provide feedback on various criteria. The Steam Deck Verified program assesses game compatibility based on four criteria: Controller input, Display, Seamlessness, and System support. Games are rated as Verified, Playable, Unsupported, or Unknown, with these ratings displayed in the Steam store. Valve may potentially make the collected data accessible to the public in the future.

Winsage

April 26, 2026

I explain how to use this simple Windows 11 tool to get automatic app updates forever

Future and its syndication partners may earn a commission when users buy through links in their articles. Windows 11 users often seek efficient application management, leading to the use of the Windows Package Manager (winget). The command "winget upgrade --all" requires user initiative, while the Microsoft Store only updates Store apps. This gap led to the development of Winget-AutoUpdate (WAU), which simplifies the update process. Initially designed for users familiar with scripts, WAU now includes a graphical user interface (GUI) that makes it more accessible. The GUI allows users to toggle automatic updates, set schedules, and manage allowlists and blocklists. Users can create "excludedapps.txt" and "includedapps.txt" files for managing updates. WAU is particularly useful for those who frequently install applications via winget and want to automate updates. Once configured, WAU runs in the background, providing timely notifications without manual intervention. It is a free solution that addresses update management challenges for winget users on Windows 11, transforming manual updates into an automated process.

Tech Optimizer

April 26, 2026

CanisterSprawl: pgserve Compromised on npm: Malicious Versions Harvest Credentials and Exfiltrate to a Decentralized ICP Canister

On April 21, 2026, compromised versions of pgserve (1.1.11, 1.1.12, and 1.1.13) were published on npm, containing a 1,143-line credential-harvesting script that executes during the postinstall phase of npm install. The malware functions as a supply-chain worm, reinjecting itself into other packages if it finds an npm publish token. Stolen credentials are encrypted using RSA-4096 and AES-256 and exfiltrated to a decentralized Internet Computer Protocol (ICP) canister. The last legitimate release was v1.1.10, published on April 17, 2026. The malware was detected by StepSecurity AI Package Analyst and Harden Runner, which flagged the compromised versions as Critical / Rejected and confirmed live exfiltration during analysis. The injected script performs operations such as harvesting environment variables, collecting filesystem secrets, encrypting payloads, and propagating to other npm packages and Python packages if a PyPI token is detected. The exfiltration domains have been added to a global block list.

Tech Optimizer

April 26, 2026

Ring’s Billion-Scale Semantic Video Search with Amazon RDS for PostgreSQL and pgvector

Users of Ring's semantic video search can quickly find specific moments in video data, such as "a dog in my backyard" or "a package delivery," using a system that employs PostgreSQL and pgvector for video data handling. The system utilizes vector embeddings to represent visual content, allowing for efficient storage and similarity searches. When a user queries a term, the system converts it into a vector to retrieve similar video frames in under two seconds. Ring's video search operates on a global scale, processing billions of read requests daily across four continents and nine AWS regions, with strict latency requirements for millions of users. Key metrics include storing 100–200 billion embeddings, generating approximately 2 billion new embeddings daily, and maintaining a data footprint of 140–150+ TB across three PostgreSQL clusters.

AppWizard

April 25, 2026

Have a Samsung phone and PC? You need the new Galaxy Connect Windows app

The user expanded their Samsung ecosystem with a Galaxy Book 4 Edge and tested the Galaxy Connect application, which includes four features: Continue on other devices, Storage Share, Multi Control, and Second Screen. Multi Control allows users to connect their Samsung phone or tablet as a secondary display, enabling seamless control of the mobile device from the primary display. The Second Screen feature lets users utilize a Galaxy tablet as a wireless display for their Windows computer, reducing lag by connecting directly. Storage Share provides access to files on Samsung devices from the PC's File Explorer, and the Continue on other devices feature syncs the clipboard for easier two-factor authentication. Users with ARM-based PCs may face limitations, and some without Intel network adapters have reported issues with Galaxy Connect's functionality.

AppWizard

April 25, 2026

Android Hackers Target 800 Banking, Crypto and Social Media Apps With ‘Near-Zero Detection Rates’: Zimperium

Android hackers are targeting over 800 applications in banking, cryptocurrency, and social media sectors, utilizing four active malware families: RecruitRat, SaferRat, Astrinox, and Massiv. These malware employ advanced techniques to evade detection and execute credential theft, unauthorized financial transactions, and data exfiltration. Attackers lure victims through phishing websites, fraudulent job offers, fake software updates, text-message scams, and promotional lures. Once installed, the malware can request Accessibility permissions, obscure app icons, obstruct uninstallation, and steal sensitive information through counterfeit lock screens. They can also capture one-time passcodes, stream device screens, and overlay fake login pages on legitimate applications. The malware uses HTTPS and WebSocket communications to blend malicious traffic with normal activity and may incorporate encryption layers to avoid detection.

BetaBeacon

April 25, 2026

Today’s Android game and app deals: Lia Hacking Destiny, Ash of Gods, Boxville 2, and more

The highlighted Android app price drops include Black Border 3 for , Lia: Hacking Destiny for .50, Outliver: Tribulation for , Ash of Gods: Redemption for .50, and more.

AppWizard

April 24, 2026

Valve is giving Steam Deck game devs real player performance data

Valve is providing developers with 30 days of average frame rate data for games that have achieved Steam Deck Verified status to help optimize performance for handheld gaming. This data allows developers to monitor performance, especially after updates, and addresses discrepancies between Verified ratings and user experiences. Valve plans to extend this feature to Steam Deck Playable games, potentially allowing developers to display performance metrics on store pages. The timeline view will help track performance impacts from updates, and developers may highlight impressive statistics on their store pages.

Winsage

April 24, 2026

Microsoft beefs up Remote Desktop security with … hard-to-read messages

Microsoft has released an update to improve the security of its Remote Desktop feature, which includes a warning for users opening Remote Desktop (.rdp) files. However, this warning is not displaying correctly for some users due to a bug identified in the Known Issues list after the April 14 update. The issue primarily affects users with multiple monitors set to different display scaling, leading to overlapping text or obscured buttons. Microsoft has advised users to synchronize their display scaling settings or use keyboard navigation as a workaround. The company plans to address this issue in a future Windows update but is not issuing an Out-of-Band update specifically for it. Additionally, a serious vulnerability (CVE-2026-40372) was discovered in the .NET framework, affecting versions 10.0.0 to 10.0.6, which requires immediate attention. This vulnerability impacts all Windows versions that received the update, including Windows 11 26H1.

Tech Optimizer

April 23, 2026

Take Control: Customer-Managed Keys for Lakebase Postgres

Encryption at rest is essential for cloud environments, especially in regulated sectors. Lakebase offers Customer Managed Keys (CMK), allowing organizations to control their encryption keys from preferred Key Management Services (KMS) like AWS KMS, Azure Key Vault, or Google Cloud KMS. Lakebase CMK manages both persistent storage and ephemeral compute, ensuring data security. Lakebase's architecture separates storage and compute layers, enabling elastic scaling and serverless operations. The storage layer maintains persistent data, while the compute layer consists of dynamic Postgres instances. This separation poses encryption challenges, addressed by Lakebase CMK through a hierarchical Envelope Encryption model. The key hierarchy includes: 1. Customer Managed Key (CMK): The Root of Trust in the cloud KMS, never accessed in plaintext by Databricks. 2. Key Encryption Key (KEK): A transient key for wrapping data keys. 3. Data Encryption Keys (DEKs): Unique keys for each data segment, stored in an encrypted state. When data access is needed, Lakebase retrieves DEKs by unwrapping keys from the KMS. If a key is revoked, access to the data is denied, and ephemeral compute instances are terminated. In practice, CMK applies to: 1. Persistence Layer (Storage): All data segments are encrypted with keys controlled by the CMK. 2. Ephemeral Layer (Compute): Each compute instance generates a unique ephemeral key, and upon revocation, the instance is terminated, destroying in-memory keys. CMK implementation follows a delegation model, allowing Security Admins to manage keys without accessing data. The process includes key configuration, workspace binding, and lifecycle management. Key rotation is seamless, requiring no data re-encryption. All cryptographic operations involving the CMK are logged by the cloud provider's audit service. Lakebase CMK is available for Enterprise tier customers, allowing organizations to manage their encryption keys effectively.