organizations Archives

Winsage

February 22, 2025

Zero Trust World: Windows and Microsoft 365 security

CyberRisk Alliance, LLC emphasizes the importance of copyright protections for digital assets, stating that all materials produced by the organization are protected under copyright law. This includes a stipulation that the material may not be altered or repurposed without prior authorization. Users of the CyberRisk Alliance website must accept the Privacy Policy and Terms of Use, which establishes their rights and responsibilities regarding the use of the site’s resources.

Tech Optimizer

February 21, 2025

Self-managed multi-tenant vector search with Amazon Aurora PostgreSQL

Organizations are using generative AI and machine learning tools to extract value from unstructured data, employing specialized machine learning models to convert data into vectors for efficient searching and retrieval. Amazon Aurora PostgreSQL-Compatible Edition, with the pgvector extension, allows developers to create a vector store for generative AI applications. Multi-tenant architectures in software-as-a-service (SaaS) applications ensure tenant data isolation to maintain security and privacy. In a multi-tenant scenario, home survey requests are processed, and survey reports are stored in Amazon S3. Embedding models convert these documents into vector embeddings, which are stored in a vector store. There are two approaches to building a vector-based application: a self-managed approach, where developers handle data processing and queries, and a fully-managed option using Amazon Bedrock Knowledge Bases. The self-managed approach involves coding to process data, generate vector embeddings, and store them in Aurora. The architecture includes data ingestion via AWS Lambda, embedding conversion, SQL queries for data retrieval, and response enhancement using a large language model (LLM). Key terminologies include vector embeddings, embedding models, chunking, pgvector, HNSW index, and IVFFlat index. The process of creating a vector store involves configuring the Aurora PostgreSQL database, enabling the pgvector extension, and establishing a schema for the vector store. The vector table includes fields for UUID, vector embeddings, text chunks, metadata, and tenant identification. Data ingestion requires coding to convert data into embeddings and insert them into the database. Retrieval of vector data is crucial for enhancing prompts sent to LLMs, with various distance functions supported for identifying similar vectors. Multi-tenancy is enforced using row-level security in PostgreSQL, ensuring tenant data isolation. The process includes updating query functions to support tenant isolation and setting the current tenant ID for queries.

Winsage

February 21, 2025

Bill Gates says Microsoft’s $3 trillion success is a blend of — youthful late-night coding escapades, a premature Harvard departure, and a sprinkle of “laissez-faire treatment” from passers-by

Microsoft has a market capitalization exceeding a trillion dollars and is a key player in the tech industry. Last year, a significant IT outage caused by a faulty kernel driver from CrowdStrike affected approximately 8.5 million Windows devices, resulting in the Blue Screen of Death (BSoD) error. Bill Gates, co-founder of Microsoft, shared insights in his memoir, "Source Code: My Beginnings," about his early passion for coding, which began at age 13. He would sneak out at night to access computers, crediting a local company, Computer Center, for helping him refine his skills. Gates left Harvard after three semesters to pursue Microsoft, a decision prompted by a visit from Paul Allen, who brought news of the Altair 8800 minicomputer kit. Gates reflected that had he stayed at Harvard, he might have missed the opportunity to co-found Microsoft.

Tech Optimizer

February 20, 2025

EDB Postgres® AI Significantly Outperforms Oracle, SQL Server, MongoDB, and MySQL in New Benchmark Study

EnterpriseDB (EDB) has released findings from a benchmark study by McKnight Consulting Group, showing that EDB Postgres AI outperforms Oracle, SQL Server, MongoDB, and MySQL in various workloads, including transactional, analytical, and AI tasks. Key performance metrics include being 150 times faster than MongoDB in processing JSON data, 4 times faster than MySQL in handling insert operations, and outperforming Oracle by 17% and SQL Server by 30% in processing New Orders Per Minute (NOPM). EDB Postgres AI also offers 7 times better price performance than Oracle and 6 times better than SQL Server. The study highlights the challenges enterprises face with legacy systems consuming 55% of IT budgets, which hampers modernization efforts. EDB Postgres AI aims to address these challenges by streamlining data infrastructure, reducing total cost of ownership, and facilitating AI capabilities in a secure environment.

Winsage

February 19, 2025

A new and dangerous keylogger is on the loose – here’s how to stay safe

Cybersecurity experts at Fortinet have identified a new threat called the Snake Keylogger, which has been involved in over 280 million blocked infection attempts. This malware uses advanced obfuscation techniques, making it difficult to detect and neutralize, and poses risks to individuals and organizations by allowing attackers access to sensitive data. Cybersecurity professionals recommend proactive defense strategies, including keeping antivirus software updated and educating users about cybersecurity issues. Fortinet has not revealed the creators of the Snake Keylogger or specific industries it targets.

Winsage

February 19, 2025

This high-risk keylogger malware is a growing threat to Windows users

Recent reports indicate a surge in the activity of the Snake keylogger, also known as the 404 Keylogger, linked to over 280 million attack attempts since the start of the year. At its peak, it was responsible for as many as 14 million infection attempts in a single day. The malware can log keystrokes and extract personally identifiable information, including geolocation data, transmitting this data back to its command server through channels like SMTP, Telegram bots, and HTTP post requests. The Snake keylogger operates on the AutoIT framework, creating a copy of itself in the Windows Startup folder to ensure execution upon every system restart. It employs advanced obfuscation techniques to evade detection by antivirus software, hiding its malicious code within processes recognized as legitimate by the operating system. The keylogger primarily spreads through sophisticated phishing attacks.

Winsage

February 19, 2025

Snake Keylogger Variant Hits Windows, Steals Data via Telegram Bots

Cybersecurity experts at FortiGuard Labs have identified a new variant of the Snake Keylogger, known as AutoIt/Injector.GTY!tr, which targets Windows users and has blocked over 280 million infection attempts worldwide, particularly in China, Turkey, Indonesia, Taiwan, and Spain. The malware spreads primarily through phishing emails with malicious attachments or links and focuses on popular web browsers to steal sensitive information by logging keystrokes, capturing credentials, and monitoring clipboard activity. It exfiltrates data to its command-and-control server via email and Telegram bots. The malware uses AutoIt scripting to create standalone executables that evade antivirus detection. It installs itself by dropping "ageless.exe" in the %Local_AppData%supergroup folder and "ageless.vbs" in the %Startup% folder to ensure persistence. The malware employs process hollowing to inject its payload into a legitimate .NET process, allowing it to hide from detection. Additionally, the Snake Keylogger can retrieve the victim’s geolocation and extract sensitive information from browser autofill systems, including credit card details. It utilizes various techniques for data collection, credential access, defense evasion, and exfiltration, posing a significant threat to Windows users.

TrendTechie

February 19, 2025

Вместо подарков – майнер: новогодняя ловушка на торрентах унесла ресурсы компьютеров по всему миру

A campaign known as StaryDobry, identified by Kaspersky Lab, began on the last day of 2024, targeting users of popular torrent trackers during the holiday season. The attack affected users globally, particularly in Russia, Belarus, Kazakhstan, Germany, and Brazil. Cybercriminals distributed trojanized versions of popular games like BeamNG.drive and Garry’s Mod, which contained hidden cryptocurrency mining software. The malware used in this campaign included XMRig, designed for mining Monero (XMR) without user consent. The installation process involved multiple layers of evasion, including checking for debugging tools and system parameters. The malware extracted files using RAR libraries, sent system fingerprints to a command server, and launched a loader that disguised itself as system files. XMRig operated in the background, utilizing the victim's CPU for mining while avoiding detection by terminating itself if analysis tools were present. The attack poses risks not only to individual users but also to corporate systems through compromised devices. No information is available about the attackers behind this campaign.

Tech Optimizer

February 19, 2025

EDB Expands Partner Program to Drive Global Postgres & AI Growth

EnterpriseDB (EDB) has expanded its Partner Program to support businesses and solution providers in utilizing an enterprise-grade Postgres data management platform for AI-driven data innovation. Over 35% of organizations are seeking enterprise-grade Postgres capabilities, with more than 67% of data workloads being hybrid. A McKinsey survey indicates that 65% of organizations are using generative AI in at least one business function. The enhanced EDB Partner Program offers on-demand support throughout the sales lifecycle, exclusive training and certification, increased go-to-market commitments, a personalized digital experience through the EDB Partner Portal, and showcases customer success stories. EDB aims to empower partners to help customers innovate and scale effectively in an AI-driven environment.

Winsage

February 18, 2025

Windows 10 Approaches Its End of Life: What You Need to Know

Microsoft has announced that Windows 10 will reach its end of support on October 14, 2025, meaning it will no longer receive security updates, bug fixes, or technical support. Users will be left vulnerable to malware and other cyber threats, and existing system issues will remain unresolved. Microsoft recommends upgrading to Windows 11, which offers new features, improved performance, and enhanced security. Users can upgrade to Windows 11 through Windows Update if their devices meet the system requirements. If not, they may need to consider new hardware. While Windows 10 will still receive security updates until the end of support date, it will not receive new features, prompting users to plan their migration to avoid security risks. It is advised to back up important data before transitioning to ensure a smooth upgrade process.