server Archives

Winsage

July 29, 2026

Microsoft reportedly using TPM chips to weed out Windows piracy

Microsoft's Trusted Platform Module (TPM) 2.0 has been integral to Windows 11's security since its launch in 2021. TPM is now standard in most CPUs, allowing Microsoft to enhance device activation security. The current Key Management Service (KMS) model has vulnerabilities that hackers exploit, prompting the need for stronger device identity and activation integrity assurances. TPM provides a hardware-level security mechanism for the activation process, where KMS hosts must present TPM credentials to validate their hardware identity and confirm they are uncompromised. Starting with upcoming Windows Server releases, KMS hosts will be required to prove they run on verified hardware before activating clients. By August 2026, Windows Server 2025 will help administrators prepare for these changes.

AppWizard

July 29, 2026

How you can claim free Ubisoft games on PC for 13 Xbox digital purchases

Ubisoft is offering select users the chance to claim free PC versions of specific digital games purchased on Xbox One and Xbox Series X/S. This promotion includes titles such as Assassin’s Creed Mirage, Assassin’s Creed Valhalla, and Far Cry 6. Users must link their Xbox and Ubisoft Connect accounts to claim the games, which also includes season pass purchases and downloadable content, but excludes in-game currencies. The Ubisoft Connect app provides an overview of owned titles, and the process is one-way, meaning users cannot claim the Xbox version of a game they already own on PC. Additionally, Ubisoft is enhancing the Xbox PC app with new games featuring premium editions and add-on content.

Winsage

July 28, 2026

Proof-of-concept exploit released for Certighost Windows AD CS vulnerability

A proof-of-concept exploit for a vulnerability in Windows Active Directory Certificate Services (AD CS), identified as CVE-2026-54121, has emerged, allowing authenticated attackers to compromise an entire Windows domain. Microsoft addressed this vulnerability in its July 2026 security updates. The flaw enables attackers to manipulate machine account attributes, obtaining certificates to impersonate critical domain controllers and execute privileged Active Directory operations. Researchers H0j3n and Aniq Fakhrul discovered the vulnerability and publicly disclosed it with a functional exploit that exploits a fallback mechanism in AD CS. This exploit can automate the extraction of sensitive credentials through a DCSync attack. Microsoft has since implemented additional validation measures to enhance security against this vulnerability.

Tech Optimizer

July 28, 2026

ClamAV Setup: Linux Antivirus in 12 Steps [2026]

Malware can threaten Linux systems, which are often mistakenly believed to be immune to viruses. It can be introduced through email attachments, infected files, or compromised plugins, especially when Linux servers interact with Windows clients or handle internet uploads. ClamAV is an open-source antivirus engine maintained by Cisco Talos, designed for scanning mail traffic and file uploads. As of mid-2026, the stable release is ClamAV 1.5.x, with version 1.5.2 being the latest patch. To deploy ClamAV, users need root or sudo access on a compatible Linux machine, at least 2 vCPUs and 2GB of RAM, 5GB of free disk space, and outbound HTTPS access to ClamAV’s signature mirrors. The installation process involves several steps, including configuring freshclam for automatic updates, validating detection with the EICAR test file, and setting up cron jobs for regular scans. ClamAV can also be integrated with mail servers and a SIEM for enhanced security. Common pitfalls in deployment include skipping the initial freshclam run and using clamscan instead of clamdscan for repeated scans. ClamAV is free for commercial use and can also scan Windows systems, although it does not replace comprehensive endpoint protection solutions.

Tech Optimizer

July 28, 2026

Migrate self-managed PostgreSQL to Amazon RDS using the RDS console

Running PostgreSQL on Amazon EC2 requires users to manage operational tasks such as patching, backups, and security. Migrating to Amazon RDS for PostgreSQL or Amazon Aurora PostgreSQL-Compatible Edition offers a fully managed service that automates these tasks, allowing development teams to focus on application development. The migration process uses the auto-migration feature in the Amazon RDS console, supported by AWS Database Migration Service (AWS DMS), which facilitates PostgreSQL-to-PostgreSQL migrations using native tools for accurate schema mapping and faster migration. The migration can be executed using various methods, including pg_dump/pg_restore, manual AWS DMS tasks, or third-party tools, with the RDS console approach being preferred for its reliability and minimal setup effort. AWS DMS supports three replication modes: full load, CDC only, and full load + CDC, with the migration duration depending on database size and network throughput. Prerequisites for migration include having a source PostgreSQL 10.4+ on Amazon EC2, a target RDS for PostgreSQL or Aurora PostgreSQL, proper IAM roles, stored credentials in Secrets Manager, and appropriate networking configurations. Considerations include unsupported objects, potential issues with sequence values, and the need to avoid schema changes during CDC. The migration involves preparing the source database, creating necessary users and permissions, and executing the migration through the RDS console. Post-migration, it is essential to verify data integrity, optimize performance by updating statistics and rebuilding indexes, and implement security best practices such as disabling the DMS user and enforcing SSL/TLS connections. Common troubleshooting errors during migration include permission issues, incorrect WAL levels, and connection refusals, each with specific resolutions. Finally, to avoid ongoing charges, it is recommended to clean up resources created during the migration process, including deleting the DMS migration task, logical replication publications, Secrets Manager secrets, and the target RDS/Aurora instance.

Tech Optimizer

July 28, 2026

‘PGSimCity’ shows how the PostgreSQL database actually works internally in a SimCity-like 3D environment.

PGSimCity is a web application that provides a 3D visualization of PostgreSQL's architecture, allowing users to explore its internal operations during SQL query execution. The application features an interactive interface that guides users through the connection process to PostgreSQL, illustrating how client connections reach the Postmaster and backend processes. It highlights the significance of connection pooling and the impact of increasing connections on backend processes. In the 'Query Lab' section, SQL statements are transformed into execution plans, showcasing processes like Parser, Rewriter, Planner, and Executor, along with execution paths such as Seq Scan and Index Scan. The shared_buffers area represents PostgreSQL's buffer cache, optimizing performance by reading data in 8KiB pages. Visualizations depict data pages stored on disk, with pathways showing the movement of pages to shared_buffers. The Write-Ahead Log (WAL) mechanism records changes for recovery, and transaction commits wait for WAL records to be flushed. Checkpointing writes dirty pages to storage in batches, which can cause latency spikes. PostgreSQL uses Multi-Version Concurrency Control (MVCC) to manage updated rows and dead tuples, which are cleaned up by autovacuum processes. The application also illustrates replication, where WAL from the primary server is sent to the standby server to maintain data consistency. Overall, PGSimCity provides a comprehensive view of PostgreSQL's components and potential performance issues related to caching, WAL management, checkpointing, vacuuming, and replication.

AppWizard

July 28, 2026

Ubisoft and Xbox Team Up for Play Anywhere-Type Solution For Select Titles

Ubisoft and Xbox have launched a dual-entitlement system for thirteen games, allowing players who buy these titles through the Xbox Store to access them on PC via the Ubisoft Connect launcher. The games included are: 1. Assassin’s Creed Mirage 2. Assassin’s Creed Valhalla 3. Avatar: Frontiers of Pandora 4. Far Cry 6 5. Immortals Fenyx Rising 6. Prince of Persia: The Lost Crown 7. Riders Republic 8. Skull and Bones 9. The Crew 2 10. The Crew Motorfest 11. Tom Clancy’s Rainbow Six Extraction 12. Tom Clancy’s Rainbow Six Siege 13. Watch Dogs Legion The rollout of PC licenses is set between July 21st and August 4th, with some titles already appearing in users' PC libraries. This system allows Xbox users to claim a complimentary PC version, but does not provide reciprocal access for PC players. Most single-purchase downloadable content (DLC) will carry over, but certain microtransactions may not.

Winsage

July 28, 2026

Windows 11 ruined my old laptop, but this lightweight Linux distro brought it back to life

An early 2019 Acer Aspire laptop, previously slow and deemed obsolete after updating to Windows 11, was transformed by installing Zorin OS Lite. The laptop, equipped with 4GB of RAM and an Intel Core i3-8145U processor, experienced significant performance improvements, including faster boot times and quicker application launches. The user found the transition to Zorin OS Lite seamless, with familiar keyboard shortcuts and a smooth interface. Performance metrics showed a Speedometer score increase from 5.68 on Windows 11 to 12.0 on Zorin OS Lite, and the system utilized less RAM while idle. The laptop regained functionality, suitable for travel and quick tasks, and the user felt encouraged to explore more complex Linux distributions.

Winsage

July 27, 2026

New Certighost PoC exploit lets attackers hijack Windows domains

A proof-of-concept exploit for the "Certighost" vulnerability (CVE-2026-54121) has been released, affecting Windows Active Directory Certificate Services. This vulnerability allows authenticated attackers to compromise a Windows domain by manipulating machine account attributes to obtain certificates from AD CS, enabling them to authenticate as that machine or even as a domain controller. The flaw was reported to Microsoft on May 14, 2026, and addressed in the July 2026 Patch Tuesday updates. The vulnerability exploits a fallback mechanism in AD CS during certificate enrollment requests, allowing attackers to direct the Certification Authority to their controlled systems. The researchers demonstrated that a low-privileged user could create a machine account and use it to impersonate a domain controller, leading to potential domain compromise. Microsoft has added validation to the chase process in the July updates to prevent this exploitation. For those unable to install the updates, a temporary workaround involves disabling the chase fallback, though this has not been extensively tested.

Winsage

July 27, 2026

Microsoft moves to end pirated Windows activations

Microsoft is introducing the KMS Hardware Secured system to enhance Windows licensing security by making unauthorized activation methods more difficult. This system will use TPM-based attestation to authenticate the server managing activation requests, ensuring only legitimate devices are recognized. Readiness notifications for Windows Server 2025 will begin in August 2026, allowing administrators to prepare for the transition to TPM-based attestation, which is expected to become a requirement for KMS activation in a future Windows Server release. This initiative targets corporate clients using Windows volume licensing to complicate unauthorized activation. Additionally, Microsoft plans to reduce its workforce by approximately 4,800 positions, or nearly 2.1% of its global staff, as part of a corporate transformation strategy.