testing Archives

Tech Optimizer

August 18, 2025

Critical PostgreSQL Vulnerabilities Allow Arbitrary Code Execution During Backup Restoration

The PostgreSQL Global Development Group has released security and maintenance updates for versions 17.6, 16.10, 15.14, 14.19, 13.22, and the third beta of PostgreSQL 18. The updates address three critical vulnerabilities: 1. CVE-2025-8714 (CVSS 8.8) - Allows code injection during dump restoration via pg_dump operations. 2. CVE-2025-8715 (CVSS 8.8) - Enables SQL injection through newline injection in object names during pg_dump. 3. CVE-2025-8713 (CVSS 3.1) - Exposes optimizer statistics data. The update also improves BRIN index performance, logical replication, and resolves WAL segment removal issues. PostgreSQL 13 will reach end-of-life on November 13, 2025. The third beta of PostgreSQL 18 is in development, with general availability expected in September-October 2025. Administrators should perform reindexing after the upgrade if using specific BRIN indexes.

Winsage

August 18, 2025

Microsoft’s Windows Update ‘Failure’—Do Not Save These Files

Microsoft's recent Windows 11 update has been linked to multiple SSD failures, particularly during large data writes, causing drives to become non-functional. Users have reported that affected drives "disappear from the OS," making SMART data unreadable, and leading to potential file corruption due to a suspected malfunction in the drive cache. SSDs with over 60% usage may be particularly susceptible after about 50GB of continuous writing, with issues also observed in some HDDs. SSDs utilizing Phison NAND controllers, especially DRAM-less models, are noted to be more prone to these problems. The affected SSDs include Corsair Force MP600, Phison PS5012-E12 controller-equipped SSD, KIOXIA EXCERIA PLUS G4, Fikwot FN955, and SanDisk Extreme PRO M.2 NVMe 3D SSD. The root cause may be a storage driver or kernel-level regression introduced with the update, which mishandles long sequential writes. Users are advised to avoid executing long sequential write operations until Microsoft provides official guidance.

Tech Optimizer

August 18, 2025

I’m a security editor, and this is the antivirus I would buy with my own money

McAfee + Premium is chosen as an antivirus solution for a household with eight devices, covering Windows, Android, iOS, and Chrome OS. It offers unlimited device coverage and a reasonable pricing structure. Key features include a VPN, password manager, identity monitoring, personal data cleanup, file shredder, malicious website identification, and enhanced social media privacy controls. In independent testing, McAfee achieved a 99.96% score in the AV-Comparatives evaluation and a perfect score in the AV Test report, though it had 15 false positives. The user interface is clean and intuitive, making it easy for all family members to use. McAfee + Premium also provides 24/7 chat and tech support.

Winsage

August 17, 2025

Windows 11’s Latest Security Update Is Reportedly Causing Several SSD Failures When Writing a Large Number of Files at Once

The latest Windows 11 update, specifically the 'KB5063878' security update, has caused significant issues for solid-state drives (SSDs) with Phison controllers, rendering them non-functional after large data writes. Users have reported that after approximately 50GB of continuous writing, the operating system fails to recognize the SSD, making the drive's partition inaccessible upon reboot. Affected SSD models include Corsair Force MP600, Phison PS5012-E12, KIOXIA EXCERIA PLUS G4, Fikwot FN955, and SanDisk Extreme PRO M.2 NVMe 3D SSD. Preliminary analysis suggests that a storage driver or kernel-level regression introduced with the update may be mishandling long sequential writes, leading to controller lock-ups. Users are advised to avoid long sequential write operations, especially if their drives are among those listed or utilize Phison controllers.

Winsage

August 17, 2025

The Microsoft Store loses the option to disable automatic updates

Microsoft has removed the option for users to disable automatic updates for Microsoft Store apps without prior notice. Users can now only delay updates for a maximum of five weeks, after which updates will occur automatically. Attempts to bypass this new protocol through registry edits have been unsuccessful. The change is likely motivated by security concerns, ensuring applications are kept up to date. Group policy remains an exception to this rule.

Winsage

August 17, 2025

Windows 11 cluttered Notepad’s right-click menu, but it’s now getting File Explorer-like UI as a fix

Microsoft is testing a new, streamlined user interface for Notepad's right-click context menu to address overcrowding caused by recent enhancements, including Copilot features. The existing menu has become unwieldy, featuring numerous options that can overwhelm users, particularly on smaller screens. The new design prioritizes common actions like cut, copy, paste, select all, undo, and delete in a single row with large icons, while retaining some less frequently used options. Additionally, Notepad now supports markdown formatting, allowing users to apply lightweight formatting such as bold and italics easily, with the option to toggle the formatting toolbar off for a simpler interface.

AppWizard

August 16, 2025

A Minecraft experience and a young boy’s ‘Wish’ granted by Microsoft

Katie Ferrell, vice president of marketing and community engagement for a nonprofit organization, emphasized that wishes provide hope and healing for children facing challenges, such as Jude. Minecraft is highlighted as a creative outlet for these children. Ohio is one of three states in the U.S. conducting infant testing for Duchenne Muscular Dystrophy (DMD), for which a cure is still not available. Lauren Janning from Make-A-Wish® Ohio, Kentucky & Indiana noted that about 80% of Wish Kids recover and lead healthy lives, with many considering their wish a turning point in their healing. Currently, 204 children in southern Ohio are awaiting their wishes, and the organization relies on community support to fulfill these wishes.

Winsage

August 16, 2025

Microsoft finally adds dark mode for Windows 11’s legacy file operation dialogs (hands on)

Microsoft is rolling out dark mode support for legacy dialogs in Windows 11, starting with essential file operations like copying, deleting, cutting, and moving files. The latest beta build (Build 26120) integrates this feature into file operation dialogs, aligning them with the dark theme of the operating system. Testing indicates that dark mode is consistent across various dialogs, with plans to extend support to additional dialogs related to file operations. Updated dialogs include those for deleting large files, emptying the recycle bin, confirming folder merges, and notifying users of file access issues. The feature is currently being tested in the Beta and Canary channels of Windows 11 24H2, with a low likelihood of cancellation as it approaches finalization for public feedback.

Winsage

August 15, 2025

Microsoft Confirms Emergency Windows Update For PC Users

Microsoft has acknowledged issues with the August security update for Windows 11, which may fail to install for some users, particularly affecting enterprise users. The error code associated with this issue is 0x80240069, and Microsoft has released an emergency update that will be automatically delivered through Windows Update. Administrators can also manually download the 'KB5063878 250814_00551 Known Issue Rollback' policy. Microsoft is testing another patch to address the installation failure and is committed to providing a resolution in a future update.

Winsage

August 15, 2025

For August, a ‘complex’ Patch Tuesday with 111 updates

Microsoft Exchange Server received five critical patches classified as important, necessitating immediate attention from IT professionals due to the active exploitation of CVE-2025-53786, which threatens hybrid Exchange environments, especially in government settings. Microsoft also released two updates for vulnerabilities CVE-2025-53772 and CVE-2025-53773 affecting Visual Studio and Microsoft’s Web Deploy tools. There were no new releases from Microsoft for Adobe products, and the only third-party updates noted were for Chromium.