processes Archives

Winsage

April 10, 2025

Windows 11 tests sharing apps screen and files with Copilot AI

Copilot on Windows 11 is being tested for OS-level integration that allows users to share app screens with the AI assistant, currently available to Windows Insiders in the U.S. This feature, known as Copilot Vision, enables real-time assistance by analyzing screen content and providing guidance. The functionality is cloud-based, not relying on local AI models. Users can share their screens by clicking an icon in the Copilot app and can stop sharing at any time. Additionally, a "File Search" feature allows users to find documents using natural language queries, capable of reading various file formats like .docx, .xlsx, .pptx, .txt, .pdf, and .json. Both features are being gradually rolled out within the Windows Insider Program, with more information on data processing and privacy expected as they progress beyond testing.

Winsage

April 10, 2025

A mysterious new folder appeared in my C drive after this Windows 11 update, should I be worried?

The Windows 11 24H2 update (KB5055523) has resulted in the unexpected appearance of a folder named "inetpub" on user systems. This folder is a harmless remnant of the security patch and is associated with Microsoft's Internet Information Services (IIS). Microsoft has not provided clarification on its emergence, but it is safe to delete if desired, as it poses no threat and does not run any hidden processes.

AppWizard

April 9, 2025

Horrifying rape and incest game on Steam faces calls to be taken down

A game titled No Mercy, released by Zerat Games in March on Steam, has faced backlash for its disturbing content, which includes themes of sexual violence and misogyny. Although designated for users aged 18 and older, minors can easily bypass this restriction. The game was not submitted for review to any age rating frameworks, and its graphic content includes elements such as incest and non-consensual sexual encounters, with promotional materials featuring pornographic imagery. Technology Secretary Peter Kyle has condemned the game, urging tech companies to remove harmful content promptly. The situation has sparked calls for stricter regulations and oversight on platforms like Steam.

AppWizard

April 9, 2025

Google releases enterprise-grade Gemini tier in Android Studio

Google has introduced a new version of Gemini for Android Studio, specifically designed for businesses. This version ensures that company code is not saved by Google and is not used for AI model training. It includes IP protection against claims related to AI-generated code. The offering, available through Gemini Code Assist Standard or Enterprise subscriptions, enhances existing features with security and IP protections, including tools like build and sync error support and App Quality Insights. Google emphasizes its commitment to security with certifications such as SOC 1/2/3 and ISO/IEC 27001. Additionally, businesses benefit from IP indemnification against copyright infringement claims related to AI-generated code. The enterprise-grade version can be accessed via the Android Studio Narwhal build on the Canary release channel with an eligible Gemini Code Assist license.

Winsage

April 9, 2025

Exploitation of CLFS zero-day leads to ransomware activity

The Microsoft Threat Intelligence Center (MSTIC) and Microsoft Security Response Center (MSRC) identified a zero-day elevation of privilege vulnerability in the Windows Common Log File System (CLFS), designated as CVE-2025-29824. This vulnerability has been exploited by the PipeMagic malware, attributed to the group Storm-2460, affecting organizations in various sectors across the U.S., Venezuela, Spain, and Saudi Arabia. Microsoft released security updates on April 8, 2025, to address this vulnerability. The exploit allows attackers with standard user privileges to escalate their access, and it was executed from a dllhost.exe process. The exploit utilizes memory corruption techniques and the RtlSetAllBits API to gain all privileges and inject processes into SYSTEM processes. Post-exploitation, the attackers injected a payload into winlogon.exe, leading to ransomware activity characterized by file encryption and the creation of ransom notes. Indicators of compromise include the creation of a CLFS BLF file at C:ProgramDataSkyPDFPDUDrv.blf, command lines associated with ransomware activities, and specific domains linked to PipeMagic. Microsoft advises applying security updates promptly and recommends strategies for mitigating ransomware threats, including enabling cloud-delivered protection and utilizing device discovery.

Tech Optimizer

April 8, 2025

PostgreSQL Merges Initial Support For NUMA Awareness

The PostgreSQL open-source database server is integrating IO_uring support for asynchronous I/O operations and AVX-512 acceleration for CRC32 computations, potentially improving performance by up to three times. It has also introduced initial support for Non-Uniform Memory Access (NUMA) awareness, aimed at enhancing performance on multi-node and multi-socket servers. This feature is available in the PostgreSQL Git repository ahead of the PostgreSQL 18.0 release scheduled for September and can be enabled with the "--with-libnuma" configuration option, currently limited to Linux systems. Enhancements include pg_shmem_allocations_numa for shared memory allocation insights and pg_buffercache_numa for buffer information across NUMA nodes.

Winsage

April 8, 2025

Microsoft fixes actively exploited Windows CLFS zero-day (CVE-2025-29824)

April 2025 Patch Tuesday introduced fixes for over 120 vulnerabilities, including a critical zero-day vulnerability (CVE-2025-29824) that is actively exploited. CVE-2025-29824 is a user-after-free vulnerability in the Windows Common Log File System (CLFS), allowing privilege escalation to SYSTEM on compromised Windows machines. Microsoft has patched 32 CLFS vulnerabilities since 2022, with six exploited in the wild. Updates for Windows 10 are not yet available. Other notable vulnerabilities include CVE-2025-26663 and CVE-2025-26670, both unauthenticated user-after-free vulnerabilities in Windows LDAP, and CVE-2025-27480 and CVE-2025-27482 in Windows Remote Desktop Services. None of these vulnerabilities have been patched for Windows 10 systems, but updates are forthcoming. Microsoft reversed its decision to discontinue driver update synchronization to WSUS servers, confirming that WSUS will continue to synchronize driver updates.

Tech Optimizer

April 8, 2025

Pools across the sea: how Hyperdrive speeds up access to databases and why we’re making it free

Cloudflare has made Hyperdrive available on the free plan of Cloudflare Workers, allowing developers to create high-performance global applications that connect to SQL databases. Hyperdrive simplifies database connectivity by using existing drivers and connection strings, reducing the need for extensive refactoring. It has been adopted by Cloudflare's engineering teams for various functions, demonstrating its effectiveness in addressing common challenges in application development. Hyperdrive significantly improves performance, with a benchmark showing latency reduction from 1200 ms to 500 ms when using Hyperdrive instead of a direct connection, and further to 320 ms with caching enabled. It employs transaction-mode connection pooling to efficiently manage database connections, minimizing overhead and ensuring optimal performance for serverless applications. Hyperdrive's architecture includes a split connection approach that reduces latency by conducting necessary round trips over shorter distances. It also features a regional pool strategy for selecting data centers based on the inferred location of the Worker, optimizing connection latency. The system includes a dual-layer caching strategy to enhance query performance and reduce load on the origin database. Developers can easily start using Hyperdrive by executing a simple command or using a dashboard to set up a sample Worker application with their existing Postgres database.

AppWizard

April 6, 2025

Pentagon inspector general investigating Hegseth’s use of Signal messaging app

DoD's acting Inspector General, Steven Stebbins, is reviewing Defense Secretary Pete Hegseth's use of the Signal app for operational airstrike discussions in Yemen to evaluate compliance with policies on commercial messaging for official communications and classification mandates. Concurrently, House Oversight Committee Democrats are investigating the Department of Government Efficiency's data usage, while OPM is directing agencies to revise performance review processes to prioritize adherence to presidential policies. The Defense Department has mandated public reporting of canceled contracts linked to Trump's efficiency initiatives. The SSA is tightening identity-proofing requirements for benefit applications, discontinuing phone verification options. During a nomination hearing, Trump’s nominees for OPM and OMB faced questions regarding federal workforce reductions. The Army has abandoned plans for a billion-dollar software development contract after feedback on draft RFPs. Employees at the IMLS have been placed on administrative leave amid concerns over the agency's future and grant disbursement obligations following Trump's executive order aimed at eliminating smaller entities.

AppWizard

April 4, 2025

Google wants to make Android 16 even better at streaming music and video

Android devices have historically relied on complex processes for secure media playback due to vulnerabilities like the Stagefright exploit. Android 16 introduces support for in-process software audio codecs, allowing codecs to operate within an app's process, reducing CPU usage and power consumption. The MediaCodecInfo class in Android 16 includes a new getSecurityModel() method to indicate whether a codec uses the standard sandboxed model or the new memory-safe model, which requires codecs to be developed in a memory-safe language like Rust. Google has been developing this feature for several years, aiming to improve the performance of the AAC codec, which is crucial for streaming applications. Current tests show that media codecs still depend on the traditional sandboxed approach, and the implementation of in-process codecs requires codec vendors to rewrite their software in Rust.