operations Archives

Tech Optimizer

April 28, 2026

Constructive Open Sources Agentic DB, the Postgres Memory Layer for AI Agents

Constructive has released agentic-db, an open-source Postgres database aimed at improving AI agents with features like persistent memory, structured knowledge, and hybrid retrieval. This database allows for efficient searching, filtering, and ranking of information, addressing inefficiencies associated with traditional markdown file storage. Key features of agentic-db include long-term memory, conversation tracking, a versioned registry for skills and tools, rules and policies for governance, task orchestration, and runtime observability. It is delivered as a single installable Postgres schema, indexed for multiple retrieval modes, and supports integration with various AI assistants through generated Agent Skills and CLIs. agentic-db is available under the MIT license for local use, with a cloud offering in development for secure, scalable solutions. Developers can access it on npm and GitHub.

AppWizard

April 27, 2026

Vampire Survivors dev is working on over 15 ‘projects,’ though that includes DLC and updates

Vampire Survivors has attracted over 27 million players and generated significant revenue since its launch in 2022. The game sold more than one million copies within two to three months of release. Developer Luca Galante reinvested earnings into the game, leading to the free release of the Emerald Beyond DLC. Poncle is developing Vampire Crawlers, a deckbuilding dungeon crawler spinoff, and has plans for additional projects. The studio aims to have small, agile teams working on various projects simultaneously. Future developments include Warhammer Survivors, which is part of the official Survivors franchise. Matteo Sapio expressed a goal of having 40 projects in parallel development globally within five years.

TrendTechie

April 27, 2026

Суд взыскал 600 тыс руб за размещение пиратских копий “Универа” и “Физрука”

The Moscow City Court has ordered a website administrator to pay a penalty of 600,000 rubles for hosting pirated copies of television series such as "Univer," "Fizruk," and "Devushki s Makarovym." The court found that the website generated revenue through advertisements and engaged in "intentional piratical activity" by offering downloads via torrent. The administrator was also required to pay an additional 11,000 rubles in court fees. Although he attempted to appeal the ruling, he missed the deadline and the court allowed him to restore it, but the original ruling remained in effect.

Winsage

April 26, 2026

This Windows‑95‑style game is pure nostalgia and weirdly addictive

Factory 95 is a Windows 95 themed automation game that launched on April 22, 2026. Players act as factory managers, creating PowerPoint slide-shows for clients while navigating tools and resources within a retro operating system. The game features nostalgic elements, including a Clippy-inspired character named "Pinny" and challenges reminiscent of early computing, such as slow loading times and managing emails. The design evokes the graphical aesthetics of the 1990s, and players must strategically manage limited resources to fulfill client requests and generate revenue.

Tech Optimizer

April 26, 2026

CanisterSprawl: pgserve Compromised on npm: Malicious Versions Harvest Credentials and Exfiltrate to a Decentralized ICP Canister

On April 21, 2026, compromised versions of pgserve (1.1.11, 1.1.12, and 1.1.13) were published on npm, containing a 1,143-line credential-harvesting script that executes during the postinstall phase of npm install. The malware functions as a supply-chain worm, reinjecting itself into other packages if it finds an npm publish token. Stolen credentials are encrypted using RSA-4096 and AES-256 and exfiltrated to a decentralized Internet Computer Protocol (ICP) canister. The last legitimate release was v1.1.10, published on April 17, 2026. The malware was detected by StepSecurity AI Package Analyst and Harden Runner, which flagged the compromised versions as Critical / Rejected and confirmed live exfiltration during analysis. The injected script performs operations such as harvesting environment variables, collecting filesystem secrets, encrypting payloads, and propagating to other npm packages and Python packages if a PyPI token is detected. The exfiltration domains have been added to a global block list.

Tech Optimizer

April 24, 2026

Fileless Malware and Email Authentication Gaps

Fileless malware operates stealthily within networks, utilizing legitimate system tools like PowerShell and Windows Management Instrumentation (WMI) to execute malicious code in memory without leaving traces on disk. Traditional antivirus solutions struggle to detect these threats due to their reliance on file signatures. The primary vector for fileless malware is email, where attackers use spoofed messages to trick users into activating malicious scripts. Misconfigurations in Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) records create vulnerabilities that attackers exploit to deliver spoofed emails. Traditional endpoint protection mechanisms are inadequate against fileless attacks, necessitating a shift towards behavioral analysis for detection. Organizations must assess their preparedness by ensuring proper email authentication configurations and enhancing endpoint security capabilities. Integration among security teams and updated employee security awareness programs are also essential. Sendmarc helps organizations mitigate vulnerabilities by providing visibility into SPF, DKIM, and DMARC configurations and enforcing DMARC to block unauthenticated messages.

AppWizard

April 24, 2026

Another spyware maker caught distributing fake Android snooping apps

The Italian digital rights organization Osservatorio Nessuno has revealed a new malware called Morpheus, used by government agencies for surveillance. Morpheus is disguised as a phone updating application and can extract various data from targets' devices. The spyware is linked to IPS, an Italian firm specializing in lawful interception technologies, which claims to operate in over 20 countries. Morpheus is categorized as "low cost" due to its straightforward infection method, which involves tricking targets into installing the software. Authorities collaborated with the target's mobile service provider to obstruct data and send an SMS prompting the installation of the malware. Once installed, Morpheus exploits Android's accessibility features to access extensive information and masquerades as the WhatsApp application to solicit biometric data. The spyware's code contains Italian phrases and references to "Gomorra," indicating its connection to the Italian spyware industry. The attack is likely linked to political activism in Italy. IPS is among several Italian spyware manufacturers that have emerged following the decline of Hacking Team.

Tech Optimizer

April 23, 2026

Take Control: Customer-Managed Keys for Lakebase Postgres

Encryption at rest is essential for cloud environments, especially in regulated sectors. Lakebase offers Customer Managed Keys (CMK), allowing organizations to control their encryption keys from preferred Key Management Services (KMS) like AWS KMS, Azure Key Vault, or Google Cloud KMS. Lakebase CMK manages both persistent storage and ephemeral compute, ensuring data security. Lakebase's architecture separates storage and compute layers, enabling elastic scaling and serverless operations. The storage layer maintains persistent data, while the compute layer consists of dynamic Postgres instances. This separation poses encryption challenges, addressed by Lakebase CMK through a hierarchical Envelope Encryption model. The key hierarchy includes: 1. Customer Managed Key (CMK): The Root of Trust in the cloud KMS, never accessed in plaintext by Databricks. 2. Key Encryption Key (KEK): A transient key for wrapping data keys. 3. Data Encryption Keys (DEKs): Unique keys for each data segment, stored in an encrypted state. When data access is needed, Lakebase retrieves DEKs by unwrapping keys from the KMS. If a key is revoked, access to the data is denied, and ephemeral compute instances are terminated. In practice, CMK applies to: 1. Persistence Layer (Storage): All data segments are encrypted with keys controlled by the CMK. 2. Ephemeral Layer (Compute): Each compute instance generates a unique ephemeral key, and upon revocation, the instance is terminated, destroying in-memory keys. CMK implementation follows a delegation model, allowing Security Admins to manage keys without accessing data. The process includes key configuration, workspace binding, and lifecycle management. Key rotation is seamless, requiring no data re-encryption. All cryptographic operations involving the CMK are logged by the cloud provider's audit service. Lakebase CMK is available for Enterprise tier customers, allowing organizations to manage their encryption keys effectively.

Winsage

April 23, 2026

Engineering secure passkey sync in Microsoft Password Manager

Passkeys are a new form of authentication that replace traditional passwords, providing a phishing-resistant and streamlined sign-in process. Microsoft Password Manager allows users to save and synchronize passkeys across devices linked to their Microsoft accounts, enhancing accessibility. The architecture for passkey syncing includes confidential computing for sensitive operations, hardware-rooted key protection for encryption keys, tamper-evident recovery storage, and encrypted synchronization across devices. Sensitive passkey operations are executed in Azure's confidential computing environments, ensuring cryptographic materials are processed securely. The encryption keys are protected using Azure Managed HSM, with access governed by attestation-based mechanisms. Registration and recovery processes require user authentication and enforce security measures within confidential computing boundaries, including a lockout state after consecutive incorrect PIN attempts. The system aims to provide a secure and user-friendly experience as part of a transition to a passwordless future.

AppWizard

April 22, 2026

Google executive responsible for AI has a solution for the game industry’s problems, and you’re not going to believe this but it’s AI

Jack Buser, the global director for games at Google Cloud, is focusing on using AI and cloud solutions to tackle challenges in the gaming industry. He noted a rebound in revenue growth but highlighted issues such as declining profits, project cancellations, and layoffs, with only Roblox and the Chinese market thriving. Buser advocates for AI as a potential solution, despite concerns about "rightsizing" strategies that may prioritize profits over employee welfare. His previous role at Stadia ended with mixed results, raising doubts about the feasibility of AI-driven game development. The industry is still awaiting a groundbreaking AI-generated game. Buser emphasizes the need for clearer discussions about AI and suggests that embracing it could lead to easier revenue generation, similar to trends in reality television.