pipeline Archives

BetaBeacon

September 21, 2026

Gaming on the Pixel 11 is a mess, and I traced it to one hidden setting

ANGLE is a compatibility layer that implements OpenGL ES on top of Vulkan, allowing OpenGL ES games to make OpenGL calls while ANGLE translates them into Vulkan commands for the GPU driver. The Pixel 11 has transitioned to an OpenGL ES-on-Vulkan architecture as part of a broader Android graphics strategy, but this change may not be completely transparent across all workloads, leading to microstuttering or jank in some games. Users can change ANGLE preferences on a per-app basis to try the native OpenGL option and potentially reduce frame-time spikes.

AppWizard

September 18, 2026

RatHat Android Malware Abuses ADB to Retain Shell Access After Uninstall

Cybersecurity experts have identified a new Android malware named RatHat, believed to be operated by Chinese threat actors. RatHat is distributed primarily through smishing and malvertising campaigns, leading users to deceptive download portals. It employs an automated multi-stage infection process and exploits Accessibility features along with a local ADB self-pairing mechanism to escape the Android application sandbox. The malware uses various anti-analysis techniques, including container tampering, manifest bombs, DEX bytecode poisoning, and dual string-encryption. RatHat's architecture consists of a malicious Android application, a Go agent, and an FRP reverse-proxy client, which together enable it to gain critical system permissions and perform various malicious activities such as credential capturing, screen recording, and SMS interception. Even if uninstalled, the malware retains shell access to the device, allowing attackers to reinstall it. RatHat can serialize the device's Accessibility tree to XML and communicate with a Generative AI assistant for tasks like screen coordinate determination and text extraction. The Go Agent, masquerading as a native library, exploits shell access to execute commands and establish a persistent connection to a command-and-control server via the FRP client. The C2 server can issue extensive commands to collect sensitive information, including SMS messages, credentials, files, and keystrokes, and RatHat also features a hardware-level keylogger.

AppWizard

September 15, 2026

Active Exploitation Alert: Threat Actors Abuse Anthropic Claude AI to Extract Secrets from 1.8M Android Apps in Major Credential Theft Campaign

Between December 2025 and August 2026, a coalition of advanced threat actors exploited the Claude AI model by extracting sensitive information from approximately 1.8 million Android applications. The operation involved groups such as ShinyHunters, Midnight Blizzard (APT29/Nobelium), and the Chinese-speaking entity GTG-10007. They automated the mass download, decompilation, and analysis of Android APKs for hardcoded credentials, API keys, and authentication tokens, leading to extensive credential theft and breaches across various sectors. The attack utilized a distributed pipeline on ten AWS EC2 instances to download APKs, which were then scanned using TruffleHog. Verified secrets were organized and routed in real-time to a private Telegram group for operational deployment. Over 2,100 Azure AD authentication tokens were extracted from more than 40 Microsoft tenants within 34 hours. The operation also included a carding component where stolen payment card data was sold. The tactics employed aligned with several MITRE ATT&CK techniques, including file discovery, unsecured credentials, valid accounts, phishing, and exploitation of remote services. ShinyHunters gained administrative control over targeted environments rapidly, leading to bulk data theft affecting over 200 organizations. Midnight Blizzard automated malware creation and phishing campaigns, targeting government and defense entities. GTG-10007 used Claude for coordinated offensive operations, discovering zero-day vulnerabilities and delivering exploits. Initially, the campaign targeted a broad range of Android APKs but later focused on organizations with valuable credentials across various sectors, including government, technology, and healthcare. Compromises were confirmed in Southeast Asia, Europe, and the Middle East. Organizations are advised to audit Android applications for hardcoded secrets, monitor API key usage, and implement robust security practices to mitigate risks.

AppWizard

September 12, 2026

GAMES Nintendo Switch can now be statically recompiled for PC

Enthusiasts in the emulation community have acquired a toolkit for the static recompilation of Nintendo Switch games on PCs, following the final update of the suyu emulator, which introduced Recompiler mode. This tool pre-compiles static code from the ARM AArch64 architecture into instructions for modern 64-bit x86 chips, allowing game logic to operate natively and reducing CPU overhead. The implementation is about 50% complete, focusing on code execution, while the graphics and audio components still rely on high-level emulation. Fully functional native ports will require third-party developers to create their own renderers for the Tegra GPU's graphics calls. The codebase allows the community to explore game structures, develop modifications, and create semi-native executables for PCs.

BetaBeacon

September 9, 2026

Arm’s new CPU cores and GPUs for Android chips promise ‘desktop-class’ games, more AI power

Arm has introduced new C2-Ultra and C2-Pro CPU cores with a 15% increase in single-thread performance and 12% faster app launches. The CPUs feature local AI integration, eliminating the need for a separate NPU or TPU. The Mali G2-Ultra NX GPU offers "desktop-class" performance with AI-native graphics, delivering a 14% performance boost and supporting Unreal Engine 5 "MegaLights." These advancements will debut in Xiaomi's 18 Fold phone initially.

AppWizard

September 6, 2026

I spent months testing the top Android keyboards; one easily replaced Gboard for good

The author initially favored Google Gboard but began exploring alternatives due to declining typing accuracy and clipboard management issues. They found Microsoft SwiftKey's stable version effective for swiping, predictive text, and multi-language support, but were disappointed with its voice input feature. Transitioning to SwiftKey Beta improved voice typing significantly, though it still lacks support for some niche languages and font scaling options. FUTO Keyboard is noted for its privacy and offline functionality but has limited language support and clipboard management. Samsung Keyboard, now the author's primary choice on their Galaxy Tab, offers deep integration with One UI and improved text prediction, though voice input still needs work. Gboard remains competent, especially in voice typing, but the author feels it is becoming less appealing due to data harvesting concerns and limited customization. Currently, the author plans to continue using Microsoft SwiftKey Beta, which meets most of their typing needs.

Tech Optimizer

September 4, 2026

Object Storage + WAL: Lakebase Postgres for the agentic era

Agents interacting with traditional OLTP databases face bottlenecks at the storage layer due to data movement required for operations like deploying instances and managing replicas. Object storage solutions, such as Amazon S3, provide a more efficient and cost-effective alternative. The text discusses two OLTP models: data-centric and transaction-centric. The transaction-centric model emphasizes the importance of transaction history, which Postgres retains through its write-ahead log (WAL). The WAL records every modification before it is committed, allowing for the reconstruction of the database state as of a specific point in time. Lakebase Postgres introduces a two-layer architecture separating compute and storage. The compute layer handles SQL operations, while the storage layer ensures data durability and historical integrity. The WAL is streamed to safekeepers for replication, and the pageserver transforms WAL into materialized pages stored in object storage. This architecture allows for efficient read and write operations without direct interaction with object storage during queries. Key features of Lakebase Postgres include branching, which allows agents to create pointers to specific LSNs without copying data; instant restore capabilities that enable point-in-time recovery; time travel queries for accessing historical data; and read replicas that do not require data duplication. The system also supports scaling down idle compute nodes and eliminates the need for separate copies of data for transactional and analytical processing by storing a single durable copy in object storage. Overall, Lakebase Postgres enhances agent interactions with the database by leveraging object storage as a foundational element.

Tech Optimizer

September 4, 2026

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

A significant vulnerability in PostgreSQL, tracked as CVE-2026-6471, has been identified by cybersecurity firm Cyera. This flaw, present since 2014, allows attackers with minimal privileges to potentially take control of databases and servers. The vulnerability, known as PostGREShell, has a CVSS score of 7.2 and can be exploited for remote code execution and privilege escalation due to a missing authorization in the database's logical decoding mechanism. Attackers with 'Replication' privileges can load arbitrary files through the logical decoding plugin, executing code with the privileges of the postgres system user. This can lead to the elevation of privileges to superuser status, granting unrestricted access to all tables and the ability to execute operating system commands. All PostgreSQL versions from 9.4 to 18 are affected, with a patch available in versions 18.6, 17.11, 16.15, 15.19, and 14.24. Organizations are advised to update their PostgreSQL instances and audit their Replication accounts.

AppWizard

September 4, 2026

DLSS 5 can be jammed into almost any PC game, and here’s how

Future and its syndication partners may earn a commission when purchases are made through links in their articles. The Control mod has led to experimentation with DLSS 5 .dll files among gamers, resulting in varied visual outcomes. For example, integrating DLSS 5 into The Blood of Dawnwalker caused visual distortions in characters. The early access version of NBA 2K27 has prompted modders to create game-agnostic versions of DLSS 5, allowing integration into various titles. DLSS 5 can produce impressive visual effects when used correctly, but it significantly impacts performance, potentially reducing frame rates by 50-60%. For instance, using DLSS 5 on an RTX 5090 dropped frame rates from 110 fps to below 50 fps. In Football Manager 26, DLSS 5 improves environmental lighting, pitch details, and player profile pictures. The installation of DLSS 5 can be done through the ReShade HDR Installer from GitHub, simplifying the process. Players can customize DLSS 5 settings in-game using the RenoDX tab. However, there are concerns about how such modifications may affect the original artistic vision of the games.

AppWizard

September 4, 2026

DLSS 5 can be jammed into almost any game now, so I’ve been playing FM26 with neural rendered little computer people because that’s just what I do

The integration of DLSS 5 .dll files into various games has produced mixed results, with some enhancements working well while others cause visual glitches. A review of The Blood of Dawnwalker revealed issues with the DLSS pipeline, resulting in an unexpected undead appearance for a character. A demonstration at Gamescom showed that DLSS 5 can significantly enhance visuals when used correctly, particularly with Model C at 60-70% intensity. However, Nvidia has noted that DLSS 5 can lead to a 50-60% reduction in frame rates, especially at 4K resolution. For example, on an RTX 5090, frame rates dropped from approximately 110 fps to below 50 fps with DLSS 5 activated. DLSS 5 can also run on lower-spec GPUs, although it was initially demonstrated with dual RTX 5090s. In Football Manager 26, DLSS 5 improved visuals without achieving photorealism, maintaining a steady 60 fps. The ReShade HDR Installer allows users to integrate DLSS tools into unsupported games, but results may vary and troubleshooting may be necessary. The official release of DLSS 5 will not include the fine-tuning sliders available through ReShade, which could complicate the preservation of developers' artistic intent. For best results, users should use the Upscaled or DLSS version of DLSS-NR rather than the 'Present' method, and may need to try different RenoDX DLSS 5 tools if issues arise.