server

Winsage
April 5, 2025
Microsoft's CEO of AI, Mustafa Suleyman, outlined the company's strategy for AI development, focusing on adapting its Copilot digital assistant to consumer needs. Despite having a large inventory of Nvidia GPUs, Microsoft is not using them for the most advanced AI models, opting instead for a measured approach that allows for lower costs and targeted solutions. The company collaborates with organizations like OpenAI and CoreWeave to enhance products such as Bing and Windows. A new feature called "memory" will be added to Copilot, allowing it to retain user information for personalized interactions. Microsoft has invested .75 billion in OpenAI, but in July 2024, it classified OpenAI as a competitor. OpenAI announced a collaboration with Oracle on the Stargate project, moving away from exclusive reliance on Microsoft Azure, although Microsoft stated that OpenAI remains committed to Azure. Suleyman emphasized the importance of developing internal AI capabilities and maintaining a long-term partnership with OpenAI through at least 2030.
Winsage
April 4, 2025
Microsoft's Windows 365 Link is a compact device priced at £349, designed to connect users to a Windows 365 Cloud PC hosted in the Azure cloud. It measures 120 mm x 120 mm x 30 mm and weighs 418 grams. The device features an HDMI port, a USB-C port, three USB-A ports, an Ethernet socket, Bluetooth, and Wi-Fi support, but lacks local storage. It is aimed at organizational use for employees utilizing Windows 365 with Microsoft Intune and Microsoft Entra ID, supporting Windows 365 Enterprise, Frontline, and Business editions, while excluding Windows 365 Government. The device is marketed towards desk-based or frontline workers in shared workspaces and is available through select resellers like Ricoh UK and Insight Enterprises in the US.
Tech Optimizer
April 2, 2025
A malware campaign has compromised over 1,500 PostgreSQL servers using fileless techniques to deploy cryptomining payloads. The attack, linked to the threat actor group JINX-0126, exploits publicly exposed PostgreSQL instances with weak or default credentials. The attackers utilize advanced evasion tactics, including unique hashes for binaries and fileless execution of the miner payload, making detection difficult. They exploit PostgreSQL’s COPY ... FROM PROGRAM function to execute malicious payloads and perform system discovery commands. The malware includes a binary named “postmaster,” which mimics legitimate processes, and a secondary binary named “cpu_hu” for cryptomining operations. Nearly 90% of cloud environments host PostgreSQL databases, with about one-third being publicly exposed, providing easy entry points for attackers. Each wallet associated with the campaign had around 550 active mining workers, indicating the extensive scale of the attack. Organizations are advised to implement strong security configurations to protect their PostgreSQL instances.
Winsage
April 2, 2025
Microsoft has made hotpatch updates available for business customers using Windows 11 Enterprise 24H2 on x64 systems, allowing seamless installation of security updates without device reboots. Hotpatching modifies in-memory code of active processes to deploy updates without interrupting user activities. Devices under a hotpatch-enabled quality update policy will receive updates quarterly, with no restarts required for eight months of the year. A Microsoft subscription is necessary to activate hotpatching, and devices must meet specific prerequisites, including an x64 CPU and enabled Virtualization-based Security. Hotpatch updates can be managed through Microsoft Intune, and devices on Windows 10 and versions 23H2 and lower will continue to receive standard updates. Microsoft initially introduced hotpatch support for Windows Server Azure Edition in February 2022 and has expanded testing to include Windows 11 24H2.
Tech Optimizer
April 2, 2025
Over 1,500 PostgreSQL instances exposed to the internet have been targeted by a cryptocurrency mining malware campaign called JINX-0126. Attackers exploit weak credentials to access PostgreSQL servers and use the "COPY ... FROM PROGRAM SQL" command for arbitrary command execution. They deploy a shell script to terminate existing cryptominers and deliver the pg_core binary. A Golang binary, disguised as the PostgreSQL multi-user database server, is then downloaded to establish persistence and escalate privileges, leading to the execution of the latest XMRig cryptominer variant. JINX-0126 employs advanced tactics, including unique hashes for binaries and fileless miner payload execution, to evade detection by cloud workload protection platforms.
AppWizard
April 2, 2025
Mullvad has introduced a multihop feature in its Android application that allows users to route their internet traffic through two distinct servers, enhancing online security and privacy. This feature creates a "tunnel within a tunnel," where data is transmitted through both an entry server and an exit server. By selecting servers in different jurisdictions, users can complicate the tracing of their data. The multihop service provides a higher level of privacy and security, as adversaries would need to execute timing attacks across multiple locations if one server is compromised. Mullvad operates under robust legal protections in Sweden and follows a strict no-logs policy, ensuring user activity is not recorded or retained.
AppWizard
April 1, 2025
Google Maps is updating its interface in version 25.13.06 to streamline trip details and enhance user experience. The estimated time of arrival (ETA) is now displayed larger and more prominently, while distance information has been moved to a secondary position. The redesign allows for easier access to additional details like fuel efficiency, parking, and toll costs without navigating through multiple menus. The update is being rolled out across all transport modes but is server-side, so user experiences may vary.
Search