traffic Archives

Tech Optimizer

June 18, 2026

Announcing Lakebase Search: agent-native retrieval built into Lakebase Postgres

Lakebase Search is a hybrid vector and full-text retrieval system integrated into Lakebase, now in beta on AWS and Azure. It utilizes two Postgres extensions: lakebase_vector and lakebase_text, allowing agents to operate on a single data backend. Agents manage four times more databases than human users and require real-time access to indexed data. The system features a tiered architecture that stores cold data in cost-effective object storage while keeping active data in local NVMe, significantly reducing costs. The lakebase_vector extension offers 32x compression for vectors, allowing a billion vectors to fit into under 10GB of RAM. The lakebase_text extension provides BM25 relevance ranking without high RAM usage. Benchmarking shows that Lakebase Search can efficiently handle large-scale workloads, achieving high recall and low latency with reduced resource requirements compared to traditional architectures. The system allows for continuous search experimentation and dedicated retrieval engines for each agent, enhancing operational efficiency and scalability.

AppWizard

June 18, 2026

Telegram vs Jio: Messaging app founder alleges cyberattack, Reliance responds

Pavel Durov, the founder of Telegram, has raised concerns about accessibility issues on his platform, attributing them to a technique called "BGP hijacking," which redirects internet traffic. He alleges that these disruptions affect users beyond India, including in the UAE, and suggests that Reliance Jio, an Indian telecom operator partly owned by Meta, may be involved in sabotaging access to Telegram. Reliance Jio has denied these allegations, stating they operate in accordance with global internet routing best practices. BGP hijacking occurs when a network falsely claims to be the preferred route, causing disruptions in internet traffic. There are indications that the network in question may be linked to Reliance Communications rather than Reliance Jio. The situation is complicated by a temporary block on Telegram in India due to the platform allegedly being used for leaking examination materials.

AppWizard

June 17, 2026

I tried Bus Simulator 27 on PC, and it’s a super relaxing game… Until it just isn’t

Bus Simulator 27 is set to launch later this year, with a free demo available on Steam until June 22. The demo lacks support for DLSS or FSR, and during testing at 1440p on high settings with an RTX 5090, frame rates ranged from 70-80 FPS, with occasional drops. The AI traffic exhibits erratic behavior, often stopping abruptly and inconsistently adhering to speed limits, leading to penalties for the player in case of collisions. The voice acting can be distracting, interrupting the gameplay experience. The game is priced modestly, with additional content available for purchase, but there are concerns about optimization and AI dynamics that need addressing before the full release.

AppWizard

June 17, 2026

New Rokarolla Android Trojan Targets 217 Banking and Crypto Apps

Zimperium’s zLabs researchers have analyzed a newly identified Android banking trojan named Rokarolla, which targets 217 distinct banking and cryptocurrency applications. It is distributed through malicious websites that impersonate popular platforms like TikTok and Google Chrome, with one identified distribution point being hxxps://infocontablidades[.]it[.]com/. The malware uses a dropper disguised as Google Play Protect to install a second-stage payload and gain Accessibility Services access, allowing it to simulate user interactions and manipulate on-screen elements. Rokarolla downloads counterfeit HTML login pages for targeted applications and overlays them to capture user credentials, including sensitive card information. It can also deploy a fraudulent PIN entry screen, read and send SMS messages, intercept one-time codes from banks, and block incoming calls. The malware rewrites the clipboard, operates a keylogger and screen content logger, and scrapes WhatsApp contact data. It captures screenshots without alerting users and has a resilient command-and-control infrastructure with multiple fallback domains. No product flaws are exploited, and defenses against it include installing apps only from Google Play and being cautious with Accessibility Services. Zimperium’s Mobile Threat Defense and zDefend products can detect Rokarolla, and a list of indicators of compromise is available on their GitHub repository.

Winsage

June 17, 2026

Windows SprySOCKS Malware: Advanced Kernel-Level Rootkit Targets Government Organizations via Supply Chain Vulnerabilities

The Windows variant of SprySOCKS malware, developed by the Chinese threat group Earth Lusca, targets government entities globally and features advanced capabilities such as rootkit-level stealth and extensive command-and-control (C2) functionalities. It operates on Windows systems, utilizing two main variants: WINDRV, which includes kernel drivers for stealth operations, and WINPLUS, a streamlined backdoor. The malware can communicate over TCP, UDP, and WebSocket, offering over 30 C2 commands for various operations, including system information gathering and keystroke logging. WINDRV loads a driver named ‘RawWNPF’ into memory using another signed kernel driver, allowing it to conceal processes and achieve persistence. The malware's design incorporates open-source elements and exploits vulnerabilities in the software supply chain, notably using a leaked certificate for driver signing. To combat SprySOCKS, organizations are advised to implement advanced endpoint detection and response (EDR) solutions, maintain regular patching, and manage supply chain risks vigilantly. The malware's adaptability and reliance on legitimate certificates complicate detection efforts, necessitating continuous refinement of security practices.

Winsage

June 16, 2026

China-Linked SprySOCKS Backdoor Expands to Windows with Driver-Based Stealth

Cybersecurity researchers have identified two new Windows variants of the SprySOCKS backdoor, named WINDRV and WINPLUS, which were previously thought to be exclusive to Linux systems. Both variants feature hard-coded command-and-control configurations and can communicate via TCP, UDP, and WebSocket protocols. They support over 30 commands for operations such as system information collection and file management. WINDRV employs kernel drivers for stealth, obscuring network connections and allowing TCP traffic diversion. SprySOCKS was first documented by Trend Micro in September 2023, linked to the Chinese state-sponsored threat actor Earth Lusca, also known as FishMonger. The Windows variants belong to version 1.8 of SprySOCKS and utilize a kernel driver named RawWNPF for enhanced stealth. The attack chain begins with an initial access method that drops a batch script, leading to the installation of the backdoor. Evidence suggests these variants may have been used in attacks against government organizations in Honduras, Taiwan, Thailand, and Pakistan between 2023 and 2024. The WINPLUS variant was first detected in July 2024 in Pakistan. There are indications of a potential UEFI bootkit involvement exploiting CVE-2023-24932, a vulnerability in the Windows Boot Manager.

Tech Optimizer

June 16, 2026

Subscription twist: Norton 360 Deluxe adds more than just antivirus

Norton 360 Deluxe is a mid-tier security subscription from Gen Digital that offers antivirus protection, a VPN, a password manager, dark web monitoring, and parental controls for up to five devices. It includes real-time threat protection, a firewall, ransomware shielding, and cloud backup of up to 50 GB for Windows users. The parental controls, known as Norton Family, allow monitoring of children's online activities. The Secure VPN encrypts internet traffic on public Wi-Fi and masks IP addresses. The package also features PC SafeCam for webcam security and a smart firewall. Norton 360 Deluxe is marketed with a promotional first-year rate, with higher renewal prices, and is available through digital subscriptions, app stores, and major retailers. The product is designed for households and individuals seeking comprehensive security solutions.

AppWizard

June 15, 2026

Facebook, Messenger, Instagram outage trends on X

On the evening of June 12, 2026, users in the Philippines and globally reported widespread outages on Meta's platforms, including Facebook, Instagram, and Messenger. At approximately 8:54 a.m. US time, Downdetector recorded over 113,000 outage reports, with 56% related to the mobile app, 25% to login difficulties, and 13% to the website. Meta's communications director, Andy Stone, acknowledged the issue on X, stating the company was working to restore services. Users expressed confusion and humor about the situation, with many fearing their accounts had been hacked. The outage affected millions worldwide, and the spike in traffic to Downdetector's site caused it to temporarily crash. Users felt relief upon realizing the outages were a global issue rather than isolated incidents.

AppWizard

June 15, 2026

Samsung MAX VPN goes offline today, leaving Android users searching for alternatives

Samsung MAX VPN has officially reached its end of life as of June 15, 2026, leaving over 50 million users without its privacy and data-saving features. The app, which was designed to mask IP addresses and compress mobile data, will no longer function as intended unless uninstalled. Users are encouraged to seek third-party VPN alternatives for online security, as the app will remain on devices but will not provide any services. The Google Play Store offers numerous highly rated third-party VPN applications, including free options, and users should review logging policies and server locations to maintain privacy.

AppWizard

June 14, 2026

Facebook and Messenger hit by global outage

On June 12, users globally experienced significant disruptions on Facebook and Messenger starting around 7:45 PM Bangladesh time. Desktop users received an error message, while mobile app users faced frozen pages. Many were logged out of Messenger and saw an "Unable to log in" message. Initially, WhatsApp and Instagram appeared operational, but later reports indicated disruptions on Instagram and Threads, with the web version of WhatsApp also down for some users. Outage monitoring platforms Downdetector and Is It Down Right Now became inaccessible due to high traffic. By 8:18 PM, some users reported regained access to Facebook and Messenger, although issues persisted. Services for Facebook began restoring around 8:19 PM, with peak outage reports at 7:49 PM totaling 2,738 complaints. In the U.S., peak reports reached 113,843 at 7:55 PM. By the end of the evening, most services, including Facebook, Messenger, and WhatsApp, were accessible again, though sporadic issues remained for some users.