servers Archives

Tech Optimizer

September 7, 2026

Top 10 Best Endpoint Detection & Response (EDR) Solutions in 2026

Endpoint detection and response (EDR) continuously records process, file, registry, and network activity on endpoints, applying behavioral analytics to identify attacker techniques while providing tools for investigation and containment. Several EDR platforms have emerged, each catering to different organizational needs: 1. CrowdStrike: Best overall for its rich telemetry and elite threat intelligence. 2. SentinelOne: Best for autonomous response, featuring strong containment and rollback capabilities. 3. Microsoft Defender for Endpoint: Best value for organizations already using Microsoft 365 E5. 4. Palo Alto Cortex XDR: Best for native data fusion across endpoint, network, and cloud telemetry. 5. Sophos: Best for generalist IT teams due to its user-friendly interface. 6. Trend Micro: Best for server and workload coverage, focusing on cloud and hybrid environments. 7. Bitdefender: Best mid-market value with strong detection capabilities at an accessible price. 8. Trellix: Best for organizations already using Trellix products, offering integrated solutions. 9. Huntress Managed EDR: Best for managed endpoint security, ideal for teams lacking full staffing. 10. Cisco Secure Endpoint: Best for Cisco environments, integrating well with Cisco security solutions. Key differentiators among these platforms include the analyst burden, alert management efficiency, and the impact of retention policies on investigation quality. The evaluation of EDR solutions should consider detection depth, response capabilities, operational costs, and the specific needs of the organization.

AppWizard

September 7, 2026

Now 20-year-old PlayStation 3 games can be launched on PC from disc

The RPCS3 emulator now allows PC players to launch PS3 games directly from a compatible disc drive. This feature was developed by digant73 and Megamouse and has expanded support from Windows to include Linux, macOS, and FreeBSD. The installation process for packages from the disc drive has been optimized, and a list of compatible disc drives has been published.

AppWizard

September 7, 2026

Here’s what we know about Blink, Russia’s Gen Z location-sharing app that publicly attacks VK’s Max messenger but sends user data to the tech giant

Recent investigations have revealed that the Russian messaging application Blink sends user data directly to VK servers, despite publicly opposing VK. The app continuously tracks users' movements and transmits location data to MyTracker, an analytics system owned by VK, every few seconds. Additionally, Blink's main feature, Blink Maps, is hosted on VK's servers. Eight senior Blink employees and a former CEO have connections to VK, either having transitioned from VK to Blink or still maintaining roles at VK.

Winsage

September 6, 2026

Four REVSTEALER-Linked Modules Disable Windows Update and Defender to Run a Crypto Miner

Elastic Security Labs has identified four previously undocumented programs associated with REVSTEALER, a Windows information stealer that persists on infected machines after self-deletion. The programs are ProManager, WinUpdate, SoftManager, and LockAppHost, each with distinct functionalities. ProManager steals wallet files and logs passwords, WinUpdate monitors the clipboard for cryptocurrency addresses, SoftManager acts as a reverse proxy, and LockAppHost executes a cryptocurrency miner after disabling Windows Update and Microsoft Defender. REVSTEALER has been marketed as a commercial infostealer since February 2026, exfiltrating sensitive data such as browser passwords, cookies, and cryptocurrency wallet information. It deletes itself after reporting its activities but leaves the four programs installed for persistence. These programs share build tradecraft with REVSTEALER, including the use of identical packers and runtime function resolutions. REVSTEALER primarily spreads through game-cheat lures and disguises itself as pirated software. It employs evasion techniques to resist analysis, including checking for sandbox environments and using indirect system calls. Users are advised to avoid unofficial software and to follow specific steps if infected, such as re-enabling Windows Update services and changing passwords. Indicators of compromise include SHA-256 hashes for REVSTEALER and its associated programs, as well as domains linked to their command and control servers.

BetaBeacon

September 6, 2026

Redfinger vs BlueStacks X vs now.gg: Cloud Emulator 2026

Cloud Android emulators move the workload off the device entirely, running the Android instance on a remote server while the PC displays the video stream and sends back taps, clicks, and keystrokes.

AppWizard

September 6, 2026

Pterodactyl Multi-Game Cloud Server: 13 Steps [2026]

In 2026, hosting game servers has become more efficient, allowing multiple game servers to run on a single cloud VPS using Pterodactyl Panel, which utilizes Docker containers for isolation. Pterodactyl is a free, open-source game server management panel that gained popularity due to its user-friendly interface and robust architecture. The latest stable release, v1.12.0, was launched in January 2026, with newer deployment templates available as of August 2026. To set up Pterodactyl, prerequisites include a cloud VPS with specific CPU and RAM requirements, Ubuntu 24.04 LTS, PHP 8.3, MariaDB 11.8.8 or newer, Redis 8.10.0 or newer, Docker Engine, a registered domain for SSL, SteamCMD dependencies, and at least 80 GB SSD storage. The installation process involves provisioning the VPS, installing necessary software, configuring Pterodactyl, setting up Nginx with SSL, and deploying game servers. Common pitfalls include under-provisioning RAM for resource-intensive games, neglecting firewall settings, and allowing backup retention to grow uncontrollably. Troubleshooting may involve addressing PHP-FPM issues, connection problems, and ensuring proper resource allocation. Advanced scaling may require multiple VPS nodes, and security measures like two-factor authentication can help protect the server. Pterodactyl is free to use commercially and can run multiple game containers on a single node.

Tech Optimizer

September 4, 2026

12-Year-Old PostgreSQL Vulnerability Enables Database, Server Takeover

A significant vulnerability in PostgreSQL, tracked as CVE-2026-6471, has been identified by cybersecurity firm Cyera. This flaw, present since 2014, allows attackers with minimal privileges to potentially take control of databases and servers. The vulnerability, known as PostGREShell, has a CVSS score of 7.2 and can be exploited for remote code execution and privilege escalation due to a missing authorization in the database's logical decoding mechanism. Attackers with 'Replication' privileges can load arbitrary files through the logical decoding plugin, executing code with the privileges of the postgres system user. This can lead to the elevation of privileges to superuser status, granting unrestricted access to all tables and the ability to execute operating system commands. All PostgreSQL versions from 9.4 to 18 are affected, with a patch available in versions 18.6, 17.11, 16.15, 15.19, and 14.24. Organizations are advised to update their PostgreSQL instances and audit their Replication accounts.

AppWizard

September 3, 2026

Fake porn apps that can hijack your Android phone

The National Cybercrime Threat Analytics Unit (NCTAU) has reported a rise in financial fraud linked to deceptive Android applications that pose as pornography apps. These apps are advertised on social media platforms like Facebook and Instagram under names such as ‘Night Play’, ‘Reloop’, ‘Kyss’, ‘Vimo’, ‘Rivo’, ‘Nexo’, and ‘Vixa’. Users who click on these ads are redirected to websites promising adult content, where they are encouraged to download APK files. Once installed, these apps often request sensitive permissions, particularly Accessibility access, which can allow malware to take control of the device and facilitate financial fraud. Some malicious apps may also install a VPN, rerouting internet traffic through servers controlled by attackers and exposing sensitive data. The malware is primarily promoted through ads linked to pornographic content, redirecting users to phishing websites that prompt APK downloads from non-Google Play sources, often using the “.live” domain extension. After installation, the initial app may download a second malicious package disguised as an update, exploiting the permissions granted to the original app.

AppWizard

September 2, 2026

Fully Playable Scream Game Found in Steam Leak [2026]

A horror game based on the Scream film franchise was discovered in the Steam data leak that occurred from August 29 to 31, 2026. The game, an unfinished multiplayer prototype created by Fatshark, was found by a Twitter user named Roly Poly Reaper, who managed to run it on their computer and enable online multiplayer. The prototype included several unfinished builds, with one featuring operational networking code that allowed players to take on the roles of survivors evading a player-controlled Ghostface. The project appears to have been a pitch build, never fully greenlit for production, and was stored in Valve’s old Steam2 backend for approximately 15 years before the leak. Roly Poly Reaper used the Goldberg Steam emulator and Radmin VPN to run the game, circumventing the need for a live connection to Valve’s servers. Fatshark, known for cooperative shooters, had reportedly built the Scream prototype around 2011, coinciding with the release of Scream 4. The prototype's existence predates the popularization of the asymmetric horror genre by several years. The Steam2 leak itself involved approximately 12 to 13 terabytes of data, including various internal builds and beta versions from Valve and third-party developers. Valve has not publicly commented on the leak.

AppWizard

September 2, 2026

MHA issues advisory on malicious Android apps used to steal money, take control of phones

Cybercriminals are increasingly using malicious Android applications disguised as pornography apps to take control of users' devices and conduct unauthorized financial transactions. The Indian Cyber Crime Coordination Centre (I4C) has issued a warning about this trend. These apps are often promoted on social media and require users to download APK files from outside the Google Play Store. The National Cybercrime Threat Analytics Unit (NCTAU) has reported a rise in financial fraud linked to these applications, which include names like “Night Play,” “Reloop,” and “Kyss.” Once installed, these apps request sensitive permissions, such as Accessibility access, allowing malware to read screen information, click buttons, enter OTPs or PINs, confirm transactions, and initiate fund transfers, leading to unauthorized access to bank accounts. Additionally, the malware may install secondary applications or a VPN to reroute internet traffic through attacker-controlled servers, exposing sensitive data. These apps may also prevent uninstallation through standard device settings. The NCTAU advises users to only install apps from trusted sources, avoid unknown APK files, refrain from granting Accessibility permissions to unfamiliar apps, regularly review installed applications, and keep their devices updated. Users should monitor bank accounts for suspicious activity and, if compromised, restart in Safe Mode to uninstall malicious apps. If removal is difficult, backing up data and performing a factory reset is recommended. Citizens are encouraged to report fraudulent applications or cybercrime incidents through the national cybercrime helpline 1930 or the government’s reporting portal.