risk Archives

Tech Optimizer

July 3, 2026

Best Antivirus for Windows XP: Options That Still Work

Finding a reliable antivirus solution for Windows XP is challenging due to the lack of support since 2014. Major antivirus vendors have withdrawn compatibility, leaving limited options. Panda Security continues to support Windows XP with its Panda Dome antivirus, which offers real-time protection and a cloud-based engine. Antivirus software can block known malware, flag suspicious activity, and stop recognized threats, but it cannot patch the operating system itself. Users have fewer choices for protection as new vulnerabilities emerge. Several antivirus tools compatible with Windows XP include: - Panda Dome: Actively maintained, offers real-time protection, free and paid plans available. - Avast (v18.8): Limited support, last updates in October 2024, free legacy version only. - AVG (v9): Discontinued in 2019, operates offline, free legacy version only. - ClamWin: Open-source, actively maintained, no real-time protection, free. - 360 Total Security: Active legacy version, multi-engine approach, real-time protection, free and premium options. - Malwarebytes (legacy): Only older versions support XP, best as a supplement, free legacy version. - VirIT eXplorer Lite: Actively maintained, free lite version with real-time protection. Choosing the right antivirus requires consideration of internet connectivity, hardware age, update status, and whether to use free or paid options. For most users, Panda Dome is recommended for its active support and real-time protection. To enhance security on Windows XP, users should keep machines offline when possible, use ad blockers, be cautious with emails and links, avoid fake antivirus downloads, transfer files via USB from modern computers, and keep third-party software updated.

Tech Optimizer

July 3, 2026

Hackers Use Fake VLC Executable and Malicious libvlc.dll to Deploy ValleyRAT

Cybercriminals are using a sophisticated method to bypass security measures by embedding malware within the VLC media player. This campaign exploits VLC to install ValleyRAT, a remote access trojan, through phishing emails that contain links to download a seemingly harmless file. Once the file is opened, it activates a hidden backdoor that evades detection by antivirus solutions. The malware has been active since 2023, with a significant increase in activity noted through 2025 and into 2026, particularly targeting Chinese and Japanese-speaking users. The infection process begins when a victim clicks a link in a phishing email, leading to a ZIP archive containing a disguised executable and a malicious DLL (libvlc.dll). The executable mimics a legitimate VLC file, and when executed, it loads the DLL, allowing the malware to run under the guise of VLC. The malware establishes persistence by creating a registry entry and connects to a remote server to retrieve the final payload. ValleyRAT employs evasion tactics to avoid detection, such as performing checks on system behavior and using a fileless approach to inject its payload directly into memory, avoiding storage on disk. Researchers recommend training employees to recognize suspicious filenames and deploying endpoint detection tools to identify DLL sideloading behavior. For organizations affected by this campaign, isolating compromised systems and reviewing security logs are critical initial steps. Indicators of compromise include a malicious email domain, a ZIP archive containing a fake VLC executable, and a download URL for ValleyRAT.

Tech Optimizer

July 3, 2026

Why identity theft protection now matters just as much as antivirus

Cybercrime has shifted focus from targeting individual devices to stealing credentials and personal data for identity theft. In 2024, consumer losses due to fraud reached billion, a 25% increase from the previous year, with over a million identity theft reports filed. Stolen passwords and session cookies are central to most breaches, making credential theft the primary enabler of attacks. Password reuse is a significant vulnerability, with 65% of individuals reusing passwords, leading to increased risk of account takeovers through credential stuffing. Bitdefender offers features like Scam Protection Pro, which protects against fraud across email, chat, and SMS, and identity monitoring in Ultimate Security that alerts users to data leaks in real-time. In 2025, researchers identified approximately 2 billion unique leaked credentials, emphasizing the need for identity protection alongside traditional antivirus solutions.

AppWizard

July 2, 2026

Former Call of Duty frontman launches new studio with a ‘Stop Killing Games’-style mission statement: If the game bombs, it goes open source

Robert Bowling, former strategist of the Call of Duty franchise, has co-founded a new studio called //18.bravo after the closure of his previous venture, Midnight Society, in 2025. The studio aims to foster a collaborative environment by aligning leadership compensation with employee success and introducing a royalty program for employees and profit-sharing with external talents. //18.bravo's debut project will not support live service models, focusing instead on creating a sustainable gaming experience with dedicated servers and optimized peer-to-peer architecture. This approach prioritizes longevity over immediate financial success, addressing gamer concerns about game shutdowns.

Tech Optimizer

July 2, 2026

From monolith to Lakebase to LTAP: rethinking the database from storage up

Sixteen years ago, the author began their PhD at UC Berkeley and was advised to focus on analytics rather than OLTP databases, which were considered solved. This led to the creation of Apache Spark and Databricks. However, during the development of Databricks, it was found that OLTP databases were not solved problems; they were difficult to scale and fragile. This realization led to the development of Lakebase, a serverless Postgres database designed with modern technology. Lakebase architecture separates the write-ahead log (WAL) and data files into independent, scalable services. The WAL is externalized to a service called SafeKeeper, which uses Paxos-based replication for durability, while data files are managed by PageServer, which stores them in cloud object storage. This design addresses challenges such as data loss, scaling, and performance interference between transactional and analytical workloads. Lakebase maintains compatibility with Postgres, offers unlimited storage, serverless compute, durable writes, and simpler high availability. It also introduces LTAP (Lake Transactional/Analytical Processing), which allows both transactional and analytical processing to operate on a single data copy in real time, eliminating the need for separate data copies and reducing costs. LTAP utilizes a unified storage layer that allows data to be materialized in both row and columnar formats, optimizing it for both transactional and analytical workloads. The system ensures that analytics can access the most current data without affecting transactional performance by using a log sequence number (LSN) to retrieve the latest changes. Unlike traditional CDC approaches, LTAP requires no explicit table replication, as all data is stored in a single governed copy. This architecture circumvents common issues faced by hybrid transactional/analytical processing (HTAP) systems, such as incomplete feature sets, lack of ecosystem support, and performance contention. The Lakebase architecture has unlocked capabilities like unlimited storage, elastic compute, durable writes, and instant branching, with ongoing developments anticipated in the future.

Tech Optimizer

July 2, 2026

From monolith to Lakebase to LTAP: rethinking the database from storage up

Sixteen years ago, the author began their PhD at UC Berkeley, where they were advised to focus on analytics rather than OLTP databases, which were considered a solved problem. However, upon developing Databricks, they found that OLTP databases were cumbersome, challenging to scale, and fragile. This led to the creation of Lakebase, a serverless Postgres database designed to address these issues by externalizing the write-ahead log (WAL) and data files into independent services. Lakebase architecture separates the WAL into a distributed service called SafeKeeper and data files into another service called PageServer, allowing for improved durability, scalability, and performance. This architecture eliminates data loss risks associated with disk failures and misconfigurations, simplifies high availability, and allows for elastic compute resources. Lakebase also introduces LTAP (Lake Transactional/Analytical Processing), which enables transactions and analytics to operate on a single data copy in real-time, avoiding the need for separate data copies and reducing costs. The system retains Postgres's ACID semantics while storing data in open columnar formats, making it accessible to both transactional and analytical engines without the delays and complexities of traditional replication methods. The architecture allows for unlimited storage, serverless compute, and instant branching, while ensuring that analytics can read the most current transactional data without affecting transactional workloads. LTAP aims to unify transactional and analytical processing by leveraging distinct compute engines for each workload while integrating at the storage layer.

AppWizard

July 1, 2026

Kalshi Challenges Illinois Sports Betting Tax as Prediction Market Jurisdiction Fight Escalates

Kalshi has filed a federal lawsuit against the state of Illinois, challenging a law that imposes taxes and licensing requirements on sports-related trades in prediction markets. The lawsuit questions whether contracts traded on Kalshi's federally regulated exchange are classified as sports bets under state laws or as financial derivatives overseen by the Commodity Futures Trading Commission (CFTC). Illinois law categorizes prediction market operators as sports wagering businesses, imposing a 1.75% tax on the first five million sports wagers annually, increasing to 3.5% for wagers above that threshold, along with a costly licensing requirement. Kalshi argues that these state requirements are preempted by federal law and contends that its offerings are financial instruments, not traditional wagers. The dispute reflects a broader conflict between federal and state regulators regarding jurisdiction over prediction markets, with the CFTC previously filing a lawsuit against Illinois over similar regulatory issues. The outcome of this legal battle could have implications for the regulation of prediction contracts related to various events beyond sports.

Winsage

July 1, 2026

🚨 Windows users, don’t let a $9.97 Pro upgrade pass you by

Microsoft Windows 11 Pro is available for .97, down from 9, as part of the Extended Deal Days event, valid until 11:59 p.m. PT today. Key features include BitLocker, Hyper-V, Windows Sandbox, and Azure AD Support. User experience enhancements include Snap Layouts, Copilot, DirectX 12 Ultimate, and Biometric Sign-In. The purchase is a one-time fee, and users should verify compatibility with Microsoft's PC Health Check app.

Winsage

July 1, 2026

I love the PC, but I’m no longer a fan of Windows

Installing Windows 11 involves a complex setup process that emphasizes Microsoft accounts, OneDrive, and personalized advertising, making it feel more like an advertising campaign than a straightforward installation. Users are encouraged to create Microsoft accounts, with local accounts being less accessible. The installation prompts users to enable various services, which can be frustrating and intrusive. The Start menu has transformed to include recommendations and promotional content, cluttering its functionality. Microsoft makes it challenging to switch default applications, reinforcing reliance on its ecosystem. Windows 11 collects significant diagnostic data, raising privacy concerns, and users must actively seek to disable data collection features. Public institutions in Europe are considering alternatives to Microsoft due to these concerns. The trend towards subscription models, such as Microsoft 365, can feel burdensome for home users. Hardware requirements for Windows 11, including TPM 2.0 and Secure Boot, have rendered many older PCs obsolete. Despite criticisms, Windows remains a powerful operating system essential for many workflows. Linux is gaining popularity, especially among gamers, as a viable alternative. Users desire a less intrusive and more user-friendly version of Windows that restores their control over devices without constant interruptions.

AppWizard

July 1, 2026

Google Is Finally Giving Android Users The Backup Settings They Should Have Always Had

Google is rolling out a per-app backup feature for Pixel devices, allowing users to control which specific apps are backed up to the cloud. This feature can be accessed through Settings > Accounts and backup > Google Backup > Other device data, where users can see the top three apps consuming space and toggle backups on or off for each app. Users can also view the backup size for each app and manage apps that currently have no data backed up. This update aims to give users clearer visibility and control over their Google cloud storage.