supply chain Archives

Winsage

July 2, 2026

Windows Weekly 990: Don’t Be Nostalgic for Stupid

Microsoft has extended the Windows 10 Extended Security Update (ESU) program for consumers by an additional year, now set to end in October 2027. Significant changes are being made to the Windows Insider experience, including a new Windows Update feature and the introduction of five new builds. Microsoft has started offering 8 GB models of its Surface Pro and Laptop, while discontinuing its Surface Go products. HP has partnered with OpenAI, and Anthropic has launched Sonnet 5. Xbox Series X|S prices are set to increase on August 1, coinciding with the discontinuation of the 2 TB X model. Microsoft may lay off approximately 5,500 employees, about 2.5 percent of its workforce. The Minecraft Bedrock edition has introduced closed captions, and Sony plans to cease the sale of physical PS media by 2028.

AppWizard

July 2, 2026

Garmin inReach Messenger – Garmin bets on compact satellite texting for US backcountry travelers

A series of unexpected fluctuations in market trends are prompting businesses to reassess their strategies. Shifts in consumer preferences driven by technological advancements and changing societal norms are reshaping the marketplace. Key factors influencing consumer behavior include the rise of digital platforms, increasing sustainability concerns, and the demand for personalized products and services. The economic landscape is unpredictable due to external factors like geopolitical tensions and supply chain disruptions. Companies are adopting strategies such as diversification, collaboration, and investment in technology to enhance resilience and adapt to these changes.

Winsage

July 2, 2026

Microsoft’s new Azure Linux 4.0 is here, and it could replace Windows Server in the enterprise

Microsoft has released Azure Linux 4.0, transitioning it from an internal tool to a server operating system that users can install on their own servers and virtual machines. Azure Linux 4.0 is built on Fedora Linux, allowing the use of RPMs and ensuring compatibility with Azure's cloud platform. The beta version features a hardened Linux kernel 6.18, optimized for performance on Hyper-V and Azure virtual machines, and incorporates SELinux-based security measures without a graphical user interface. In the Azure Marketplace, it is marketed as a "Microsoft-built Linux distribution for Azure," with formal support available for deployments on Azure but not for standalone hardware. The Azure Linux GitHub repository provides transparency into the distribution, encouraging community engagement while Microsoft retains control over the base image's contents. Azure Linux is positioned as a free, Azure-optimized server operating system for hybrid environments, potentially signaling a shift away from Windows Server.

AppWizard

June 26, 2026

Banking Apps, No Google, and a Locked Bootloader: How iodé Makes Privacy Android Work for Everyone

Brian from iodé discussed the project's goal of creating a user-friendly, privacy-focused Android distribution. Key features include a tracker blocker that enhances user privacy and two app stores—F-Droid and Aurora Store—to address app compatibility concerns. Users can uninstall pre-installed apps and experience reduced notifications and ads. iodé promotes sustainability by encouraging the use of refurbished devices and aims to support a wider range of devices beyond just Google Pixels. The user base is estimated at over 10,000 individuals across various countries, with a focus on privacy and usability. iodé offers integrated privacy features and monthly security updates, supporting over 60 devices.

Winsage

June 25, 2026

Microsoft Quietly Extends Windows 10 ESU For One More Year

Microsoft is expected to extend the Windows 10 Extended Security Updates (ESU) program by an additional year, with the new end date set for October 12, 2027, instead of the previously stated October 2026. This change is reflected on the Microsoft website, which confirms the new timeline.

AppWizard

June 24, 2026

Steam Machine: Hardly any cheaper gaming PCs, 8 GiByte is enough

PCGH and PC Games discussed the new Steam Machine with Valve's Lawrence Yang and Yazan Aldehayyat. The final cost of the Steam Machine exceeded initial expectations due to unforeseen supply chain challenges related to memory and storage. Aldehayyat expressed pride in the product's quality and performance, despite its higher price point potentially excluding some buyers. Yang mentioned that future price adjustments could be considered if market conditions allow. The SteamOS does not currently support dual booting, but users can set up dual boot systems using external media. Valve is collaborating with anti-cheat providers like Easy Anti-Cheat and BattlEye to implement solutions for Linux. The Steam Machine is equipped with 8 GB of VRAM, which Aldehayyat believes is sufficient for most games at 1080p resolution. A verification program for the Steam Machine will be implemented, similar to that of the Steam Deck, ensuring better performance for verified games.

Tech Optimizer

June 23, 2026

Active Exploitation of Critical CVE-2026-20253 in Splunk Enterprise: Unauthenticated RCE via PostgreSQL Sidecar Service

A critical security vulnerability, SVD-2026-0603 (CVE-2026-20253), has been identified in Splunk Enterprise versions 10.0.0 through 10.0.6 and 10.2.0 through 10.2.3. This flaw allows unauthenticated, remote attackers to create or truncate arbitrary files on the host system by exploiting the PostgreSQL Sidecar Service endpoints. The vulnerability is actively exploited, with public proof-of-concept code available, and has been added to the CISA Known Exploited Vulnerabilities (KEV) list. Successful exploitation can lead to full remote code execution (RCE) as the Splunk user. The vulnerability arises from inadequate authentication controls on the PostgreSQL Sidecar Service endpoints, specifically /v1/postgres/recovery/backup and /v1/postgres/recovery/restore, which are accessible without authentication. It is classified under CWE-306: Missing Authentication for Critical Function and has a CVSS v3.1 base score of 9.8 (Critical). Attackers can exploit the vulnerability by sending crafted HTTP POST requests to the exposed endpoints, allowing them to create or truncate files and potentially execute malicious scripts. Indicators of compromise include unexpected files in directories such as /tmp/ or /opt/splunk/var/run/supervisor/pkg-run/, modified Splunk Python scripts, and unusual outbound connections from Splunk to unknown PostgreSQL servers. The vulnerability aligns with several MITRE ATT&CK techniques, including T1190 (Exploit Public-Facing Application) and T1059 (Command and Scripting Interpreter). Active exploitation of CVE-2026-20253 has been confirmed, and it is likely that both opportunistic cybercriminals and sophisticated threat actors will use this exploit. The affected versions of Splunk Enterprise are 10.2.0 through 10.2.3 and 10.0.0 through 10.0.6, with the issue resolved in versions 10.2.4 and 10.0.7. Organizations are advised to upgrade to fixed versions or disable the PostgreSQL Sidecar Service as a mitigation strategy.

AppWizard

June 21, 2026

PlayStation’s PC port era appears over as Sony scrubs key policy language

Sony's recent annual business report indicates a shift in its strategy for first-party titles, removing the previous commitment to release PlayStation games on PC after console launches. Analysts suggest this change signals a focus on PS5 exclusivity for upcoming single-player titles. Reports have indicated that future games like Ghost of Yotei, Saros, and Marvel’s Wolverine may remain exclusive to the PS5. Additionally, the report highlights Sony's commitment to integrating artificial intelligence in game development to enhance creativity. The company has also revised its business outlook, removing the term "profitable" due to ongoing supply chain challenges and rising hardware costs, which have affected its ability to expand the PS5 installed base.

Tech Optimizer

June 20, 2026

Neoclouds, sovereign AI and Postgres: The new operating model for regulated enterprises

Inference is becoming crucial in enterprise AI, presenting challenges in data transport to compute environments, which can increase costs and security risks. Enterprises aim to maintain data integrity and avoid multiple copies. Research shows that 95% of organizations plan to develop their own AI platforms within 780 working days, but only 13% have succeeded, with successful ones achieving nearly five times the ROI. Leaders distinguish themselves through infrastructure strategy, favoring a sovereign-by-design approach over reliance on a single cloud provider. Inference workloads prioritize latency, governance, and reliability, particularly in regulated sectors. Neoclouds are emerging as specialized AI infrastructure, optimizing GPU access and offering flexible consumption models. Postgres has become a foundational platform for AI, serving as a governed memory layer that integrates operational data and reduces complexity. Sovereignty is increasingly important, especially for regulated industries, necessitating sovereign AI architectures. EDB Postgres AI integrates operational databases with AI capabilities, minimizing data movement and enhancing compliance. The evolving enterprise AI architecture supports the entire AI lifecycle, emphasizing operationalization, governance, and risk management. Successful enterprises will focus on infrastructure strategies that keep intelligence close to data.

Winsage

June 17, 2026

Windows SprySOCKS Malware: Advanced Kernel-Level Rootkit Targets Government Organizations via Supply Chain Vulnerabilities

The Windows variant of SprySOCKS malware, developed by the Chinese threat group Earth Lusca, targets government entities globally and features advanced capabilities such as rootkit-level stealth and extensive command-and-control (C2) functionalities. It operates on Windows systems, utilizing two main variants: WINDRV, which includes kernel drivers for stealth operations, and WINPLUS, a streamlined backdoor. The malware can communicate over TCP, UDP, and WebSocket, offering over 30 C2 commands for various operations, including system information gathering and keystroke logging. WINDRV loads a driver named ‘RawWNPF’ into memory using another signed kernel driver, allowing it to conceal processes and achieve persistence. The malware's design incorporates open-source elements and exploits vulnerabilities in the software supply chain, notably using a leaked certificate for driver signing. To combat SprySOCKS, organizations are advised to implement advanced endpoint detection and response (EDR) solutions, maintain regular patching, and manage supply chain risks vigilantly. The malware's adaptability and reliance on legitimate certificates complicate detection efforts, necessitating continuous refinement of security practices.