Security Archives

Tech Optimizer

July 22, 2026

Migrating mission-critical payments at Nubank to Amazon Aurora PostgreSQL

Nubank, a digital banking platform with approximately 135 million customers in Brazil, Mexico, and Colombia, faced challenges with its payment infrastructure due to inefficiencies in managing 7.5 TB of self-hosted PostgreSQL databases. Queries took over 13 minutes to execute, and replication lags exceeded four minutes during peak times. To address these issues, Nubank evaluated database solutions based on developer productivity, operational efficiency, performance reliability, and scalability. They selected Amazon Aurora PostgreSQL-Compatible Edition for its compatibility, performance improvements, and automated features. The migration to Aurora was facilitated by AWS Database Migration Service (AWS DMS), which minimized downtime and allowed for efficient transition. Post-migration, query performance improved significantly, with some queries executing up to 1,900 times faster, and overall end-to-end service latency decreased, enhancing customer experience. The migration resulted in a 25 percent cost reduction and ensured compliance with regulatory requirements.

AppWizard

July 22, 2026

I’m very into this Papers, Please-esque puzzle game about identifying traitors to the socialist motherland

Players assume the role of Aleksey Lutomski, a recruit at the security service of a fictional 20th-century communist state, in the game What Awaits, Aleksey?. Set in 1970, the game involves examining evidence such as coded letters, covert photographs, and wiretapped conversations to identify members of an underground dissident cell called the KNOT network. The gameplay emphasizes a balance between challenge and engagement, with players needing to present findings to superiors who critique their work. The game features a 1970s setting with mechanical tools like calculators and tape recorders that enhance the investigative experience. Players must navigate misleading clues and make critical decisions that affect their allegiance, potentially choosing between siding with conspirators or remaining loyal to the state. The game explores themes of loyalty, identity, and moral dilemmas within a historical context.

AppWizard

July 22, 2026

What ‘long tail’ should you expect for your PC game in 2026?

GameDiscoverCo hosted the 'Scrappy Saves The Animals' game jam in collaboration with the Oakland Ballers on Itch.io, with the top game being Scrappy’s Rescue Run, which will be showcased at an upcoming event. GDCO Pro reported on trending unreleased Steam games, with Dear Passengers leading in wishlists, followed by Paper Shredder and Guildrun. An analysis revealed that AI-flagged games achieve around 3,000 sales, which is 55% of the rate of non-AI titles. The Binding Of Isaac Complete Bundle sold nearly 4 million additional units after a 90% off sale during the Steam Summer Sale. A developer was arrested for injecting malware into Steam games, affecting around 8,000 users and stealing approximately 0,000 in cryptocurrency. Roblox announced a UGC-centric Build feature, raising concerns about predatory offers to creators. Xbox Game Pass added titles like Halo: Campaign Evolved and Beast of Reincarnation. Valve updated SteamVR with a more VR-native interface. Epic Games and Google withdrew a lawsuit settlement attempt that could impact Android app stores. GameDiscoverCo Pro introduced automated graph annotations for Steam demo launches. An analysis of games released between July 2023 and July 2025 showed cumulative sales increases over time, with higher-priced titles having better long-term sales. Multiplayer and co-op games are experiencing promising sales trajectories. The GameDiscover Show has returned, discussing trends in game discovery and insights from GDCo’s AI survey.

Winsage

July 22, 2026

One in six Windows PCs still runs Windows 10, and the vulnerabilities are piling up

Approximately 17% of all Windows client devices are still running Windows 10, equating to about one in six machines. Windows 11 accounts for 78% of Windows devices, with third-party trackers indicating it surpassed 70% of desktop share as of February 2026. Official support for Windows 10 ended in October 2025, but Microsoft’s Extended Security Updates (ESU) program will provide patches until October 2027 for eligible devices. A typical Windows 10 device has an average of 1,903 active security vulnerabilities, nearly three times the 652 CVE-tracked flaws found on a Windows 11 machine. 66% of Windows 10 vulnerabilities are classified as "high" or "critical." Small and medium enterprises have 21.4% of their Windows devices still on Windows 10, while larger enterprises have 16.6%. The healthcare and pharmaceuticals sectors have 23% of devices on Windows 10, followed by consumer and retail at 22%, and manufacturing at 18%. Lansweeper is urging organizations to enroll in the ESU program and address reasons for remaining on Windows 10 as 2026 approaches.

Winsage

July 21, 2026

LG admits its monitor app installs bloatware via Windows Update, and Microsoft is letting it happen

A growing number of LG monitor users have reported that connecting their devices to Windows systems results in the automatic installation of the LG Monitor App Installer, which prompts users with a McAfee trial advertisement. YouTuber Gamers Nexus found that connecting an LG UltraGear monitor led to the installation of LG's driver package and the LG Monitor App Installer, with the McAfee pop-up appearing 31 times over 32 boots. This automatic installation is facilitated by device metadata, which Windows uses to download associated applications without user notification. Users must be signed into the Microsoft Store and connected to the internet for this to occur, leading to frustrations about transparency. Reports of unsolicited McAfee pop-ups have been shared on platforms like Reddit, with users confirming the app's installation was logged as part of a Windows Update. LG has acknowledged the inclusion of McAfee in their app updates, promoting a free trial, which has raised privacy concerns. The app's rating on the Microsoft Store has dropped to around 1 out of 5 due to user dissatisfaction. Users can prevent automatic installations by adjusting Group Policy settings, while macOS requires manual approval for third-party applications. Neither Microsoft nor LG has formally addressed the concerns regarding silent installations and McAfee pop-ups.

Winsage

July 21, 2026

Microsoft fixes the Windows 11 bug slowing down some Dell PCs

Microsoft released an unscheduled update for Windows 11, designated as KB5121767, targeting users on versions 24H2 and 25H2 to address performance issues on certain Dell PCs and laptops with Intel Innovation Platform Framework drivers. The update aims to fix degraded battery life, increased power consumption, and unexpected system behavior caused by conflicts with these drivers. Affected devices primarily include newer Dell models such as the Precision, XPS, and Pro Max series. Users can obtain the update automatically if they have enabled the relevant option in Windows Update or manually through Settings or the Microsoft Update Catalog. The update modifies the Windows build number to 26200.8894 for 25H2 and 26100.8894 for 24H2 and includes previous security and quality enhancements. Microsoft recommends the update for users experiencing sluggish performance or erratic behavior after July updates, particularly those with recent Dell devices with Intel processors.

Winsage

July 21, 2026

Persistent Telemetry: Permanent Microsoft Windows Identifier

Discussions about consumer privacy in the Windows ecosystem have focused on optional diagnostic settings and telemetry controls. Recently, the Global Device Identifier (GDID), a permanent device-level token embedded in the Windows operating system, was revealed in a U.S. Department of Justice complaint related to a cybercriminal investigation. The GDID uniquely identifies a Windows installation and is used by Microsoft services. It is generated when a device is linked to a Microsoft account and resides in the Windows registry, being included in data sent to remote servers. There is no option to disable or delete the GDID, and attempts to do so can disrupt essential features. This has led privacy-conscious users to consider alternatives like Linux, which offers more control over data and does not require persistent identifiers. For Windows users, strategies to minimize data linked to the GDID include using local accounts, disabling optional diagnostics, and reviewing cloud app sync settings. Privacy advocates are calling for better user controls and opt-out mechanisms for hardware tracking tokens.

Tech Optimizer

July 21, 2026

Advanced Threat Protection: How AI Transforms Enterprise Security

An attacker is testing stolen passwords against a company with inadequate firewall protection, highlighting the flaws in traditional security measures. Modern attacks, including ransomware and phishing, have evolved, necessitating advanced threat protection (ATP) that incorporates artificial intelligence (AI) for improved threat detection and response. AI-driven ATP identifies attacks that conventional tools miss, such as fileless malware and targeted phishing, by learning normal operating patterns and flagging deviations. Traditional security relies on known malware signatures, which are ineffective against zero-day attacks and polymorphic malware that changes its identity. Cloud misconfigurations and hybrid security gaps further complicate security. AI enhances detection by focusing on malicious behaviors rather than just file signatures, allowing for rapid identification of threats. Automated incident response can isolate affected endpoints and terminate malicious processes quickly. Behavioral analytics and threat intelligence integration improve ATP effectiveness by understanding user behavior and recognizing attack patterns. AI-powered ATP significantly reduces breach containment time and false positives, shifting the focus from reactive cleanup to proactive prevention. Best practices for maximizing ATP include integrating it into existing security operations, keeping machine learning models updated, and regularly testing defenses against real-world threats.

Winsage

July 21, 2026

One in six PCs still run Windows 10, and they’re far less secure than Windows 11

Windows 10 officially reached its end of support in October 2025. Windows 11 has a 78.8% share of Windows devices, while Windows 10 maintains 16.9%. A typical Windows 10 device has an average of 1,903 active Common Vulnerabilities and Exposures (CVEs), compared to 652 on Windows 11, with 66.6% of Windows 10 vulnerabilities rated as high or critical. Microsoft's Extended Security Updates (ESU) program has been extended until October 12, 2027, providing critical security patches for eligible Windows 10 devices. The rise in memory and storage prices has made older Windows 10-compatible hardware more economically viable for some users.

Winsage

July 21, 2026

Microsoft Confirms WSUS Sync Issue Causing Update Delays and Timeouts

Microsoft has identified synchronization delays and timeout errors affecting Windows Server Update Services (WSUS), which risks the timely delivery of Windows updates. WSUS is a management tool for distributing Windows updates across networks. Microsoft deprecated WSUS in September 2024 but continues to provide security fixes and updates. The synchronization issue has led to failures and delays in downloading update metadata, particularly impacting Windows 11 version 23H2 and later, Windows 10 version 1607, and Windows Server 2012 and later. This issue began around July 13, 2026, with mitigation efforts starting on July 18, 2026. Microsoft has released a partial fix for newly installed or rebuilt WSUS servers, while existing servers may still face challenges. The company is developing additional fixes and guidance. In previous years, Microsoft dealt with other WSUS-related issues affecting enterprise clients.