rights Archives

Tech Optimizer

September 11, 2026

12-Year-Old PostgreSQL Flaw Lets Attackers Execute Code on Database Servers

A PostgreSQL vulnerability identified as CVE-2026-6471, known as PostGREShell, allows attackers with minimal replication access to execute arbitrary code on database servers. This flaw has existed for approximately 12 years and affects non-superuser PostgreSQL accounts with the REPLICATION attribute, commonly used for backup and replication tasks. The vulnerability arises from inadequate restrictions on the library path specified as an output plugin name, enabling an attacker to exploit the logical decoding feature to load a malicious library. Exploitation requires only a PostgreSQL account with REPLICATION privileges, wal_level set to logical, and access to SMB port 445. The flaw was discovered by Cyera Research and dates back to PostgreSQL 9.4's release in 2014. Patches have been released for versions 18.6, 17.11, 16.15, 15.19, and 14.24, and organizations are advised to upgrade to these versions. Database administrators should audit accounts with the REPLICATION attribute and restrict replication connections. Limiting outbound network access and monitoring logical replication activity is also recommended to mitigate risks.

AppWizard

September 10, 2026

How to Delete Your Digital Footprint From the Internet: A Complete Guide

Android privacy tools allow users to control camera access, microphone use, location permissions, and app activity, but they only protect information managed on the device or connected services. A digital footprint extends beyond the device, with personal information remaining accessible through search results, social media profiles, and data broker listings even after permissions are changed. To manage this footprint, users should identify publicly visible information, review old accounts, and delete unnecessary records. Simply deleting an Android app does not erase the associated account, which may retain personal data. Users should actively close unused online accounts to maintain digital hygiene. Data brokers publish personal information that cannot be removed through Android privacy settings, requiring users to follow an opt-out process to remove their data. While Android privacy settings are important, they do not eliminate external records. Data breaches require vigilance, including changing compromised credentials and monitoring for suspicious activity. Removing the source of information is more effective than just eliminating search results, and legal rights may exist in some regions for personal data removal. Completely erasing a digital footprint is rarely feasible due to public records and the persistence of past posts. The goal should be to minimize irrelevant content while retaining useful accounts. Users should begin by deleting information they control, then address data brokers and public profiles.

AppWizard

September 8, 2026

Connecticut attorney general calls Kik messenger app a ‘predator’s paradise’

Connecticut's Attorney General, William Tong, is investigating MediaLab.AI Inc.'s messaging app, Kik, due to concerns about inadequate age assurance practices and content moderation. Child safety advocates have criticized Kik as a “predator’s paradise.” Tong described Kik as a platform with significant issues related to sexual abuse, exploitation, and bullying, lacking meaningful age verification and protections for users. The app has over one-third of American teens using it, down from 40 percent in 2016. MediaLab has only partially responded to inquiries about privacy and safety. Tong's office has issued a civil investigative demand for information on MediaLab’s data processing, content moderation, and age assurance practices to assess compliance with the Connecticut Data Privacy Act and the Connecticut Unfair Trade Practices Act.

Winsage

September 6, 2026

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Elastic Security Labs has identified four previously undocumented programs associated with REVSTEALER, a Windows information stealer that persists on infected machines after self-deletion. The programs are ProManager, WinUpdate, SoftManager, and LockAppHost, each with distinct functionalities. ProManager steals wallet files and logs passwords, WinUpdate monitors the clipboard for cryptocurrency addresses, SoftManager acts as a reverse proxy, and LockAppHost executes a cryptocurrency miner after disabling Windows Update and Microsoft Defender. REVSTEALER has been marketed as a commercial infostealer since February 2026, exfiltrating sensitive data such as browser passwords, cookies, and cryptocurrency wallet information. It deletes itself after reporting its activities but leaves the four programs installed for persistence. These programs share build tradecraft with REVSTEALER, including the use of identical packers and runtime function resolutions. REVSTEALER primarily spreads through game-cheat lures and disguises itself as pirated software. It employs evasion techniques to resist analysis, including checking for sandbox environments and using indirect system calls. Users are advised to avoid unofficial software and to follow specific steps if infected, such as re-enabling Windows Update services and changing passwords. Indicators of compromise include SHA-256 hashes for REVSTEALER and its associated programs, as well as domains linked to their command and control servers.

Tech Optimizer

September 5, 2026

Silver Fox uses adware to distribute ValleyRAT backdoor

The cyber threat group Silver Fox is distributing the ValleyRAT backdoor disguised as a legitimate signed Chinese adware application, specifically bundled with the QN Wallpaper tool. This malware allows attackers to gain comprehensive control over infected machines, enabling them to collect sensitive information, capture screenshots, and deploy additional malicious modules. The attack utilizes DLL sideloading, where a modified version of QN Wallpaper loads a malicious DLL from the same directory, circumventing signature-based security measures. The installer disables Windows Defender, adds itself to autorun entries, and uses the "runas" command to elevate privileges if the user lacks administrator rights. ValleyRAT also marks its process as critical, potentially causing a blue screen of death if terminated. Kaspersky has identified Silver Fox as the likely perpetrator of this campaign, known for similar techniques.

Winsage

September 3, 2026

17 Useful WinGet Commands Every Windows 11 User Should Know

WinGet is a package manager included with Windows 11, accessible via a command line interface. It provides a more efficient method for installing applications compared to traditional download methods. Users can verify WinGet installation by running the command winget --version. Key commands include: 1. winget search : Finds packages by name, publisher, or moniker. 2. winget show --id : Displays detailed information about a specific package. 3. winget install -e --id : Installs a package using its exact ID. 4. winget install -e --id --version : Installs a specific version of a package. 5. winget install -e --id --silent --accept-package-agreements --accept-source-agreements: Installs a package silently without user prompts. 6. winget list: Lists all installed applications. 7. winget upgrade: Lists installed packages with available updates. 8. winget upgrade --all --include-unknown --silent --accept-package-agreements --accept-source-agreements: Updates all packages without user input. 9. winget uninstall : Removes a specified package. 10. winget export: Generates a JSON file of installed packages. 11. winget import: Reinstalls applications from an exported file. 12. winget pin : Prevents a package from being updated. 13. winget download : Retrieves an installer without executing it. 14. winget repair : Initiates a repair routine for an application. 15. winget source: Manages package sources. 16. winget settings: Opens the WinGet settings file for customization. 17. winget configure: Applies a configuration file for installations. Three commands are primarily for package publishers and can be ignored by most users: PLACEHOLDER3dfbcb91baab02cd, PLACEHOLDER5b3baaac6e2d9202, and winget dscv3. If WinGet is not recognized, it may be due to a missing App Installer package, a missing PATH entry, or running in an unsupported context. WinGet is safe to use, compatible with Windows 10 version 1809 and later, and does not require administrator rights for all commands.

AppWizard

September 3, 2026

Double Fine Bringing Xbox, PC Game Keeper to PS5

Double Fine is set to release its game Keeper on the PlayStation 5. A new set of Trophies for Keeper has appeared on Exophase, suggesting an imminent release, potentially announced during an upcoming State of Play livestream. Double Fine has retained the rights to its intellectual properties, allowing for the PS5 port without Microsoft’s backing. Keeper originally received a Metacritic rating of 80 and features a narrative where players control a lighthouse that awakens to embark on an adventure with a seabird.

AppWizard

September 2, 2026

Fully Playable Scream Game Found in Steam Leak [2026]

A horror game based on the Scream film franchise was discovered in the Steam data leak that occurred from August 29 to 31, 2026. The game, an unfinished multiplayer prototype created by Fatshark, was found by a Twitter user named Roly Poly Reaper, who managed to run it on their computer and enable online multiplayer. The prototype included several unfinished builds, with one featuring operational networking code that allowed players to take on the roles of survivors evading a player-controlled Ghostface. The project appears to have been a pitch build, never fully greenlit for production, and was stored in Valve’s old Steam2 backend for approximately 15 years before the leak. Roly Poly Reaper used the Goldberg Steam emulator and Radmin VPN to run the game, circumventing the need for a live connection to Valve’s servers. Fatshark, known for cooperative shooters, had reportedly built the Scream prototype around 2011, coinciding with the release of Scream 4. The prototype's existence predates the popularization of the asymmetric horror genre by several years. The Steam2 leak itself involved approximately 12 to 13 terabytes of data, including various internal builds and beta versions from Valve and third-party developers. Valve has not publicly commented on the leak.

Tech Optimizer

August 31, 2026

ValleyRAT Backdoor Hides in Signed Adware That Users Add to Antivirus Exclusions

Silver Fox is linked to the distribution of a backdoor malware called ValleyRAT, disguised as the legitimate QN Wallpaper adware application. Once installed, ValleyRAT provides complete control over the compromised machine. The malware uses DLL sideloading to operate under the guise of a legitimate process, bypassing security measures. It disables Windows Defender and adds itself to autorun entries, and can mark its process as critical, causing system crashes if terminated. Kaspersky has identified specific indicators of compromise (IoCs) including hashes, command-and-control servers, and associated domains. In 2026, Kaspersky recorded over 100,000 detections of ValleyRAT affecting more than 1,500 unique users, mainly in China and India.

Winsage

August 29, 2026

Site provides instructions to get up to $175 back for your pre-installed Windows 11 license — new portal provides legal forms, but warns buyers not to wipe storage first

A significant portion of new PCs is sold with Windows 11 pre-installed, causing frustration among Linux enthusiasts. The Refund4Freedom initiative, launched by the Italian Linux Society and the Free Software Foundation Europe, aims to provide consumers with the option to purchase laptops without being tied to a specific operating system and to avoid paying for unwanted software. The initiative has three main demands: 1. Freedom of Choice: Consumers should not be forced to use or pay for pre-installed software. 2. Transparent Pricing: Consumers should be able to purchase hardware without pre-installed software and see price differences. 3. Clear Refund Processes: Manufacturers must provide clear guidelines for requesting refunds for pre-installed software. The Refund4Freedom website details various brands' reimbursement practices, noting that Acer and Lenovo have established refund processes for Windows, while Asus has a less visible route primarily in Italy. Dell and HP currently do not offer reimbursement options. For those wishing to reject Windows, Refund4Freedom advises documenting contract clauses, contacting customer service, and using a pre-made form for refunds, which is tailored for Italy. The typical reimbursement amount for a Windows license is around €50, though it varies by region and manufacturer.