traffic Archives

Winsage

July 8, 2026

Trojanized LetsVPN installer gives attackers remote access to Windows PCs

A malware campaign has been discovered that exploits the VPN service LetsVPN. Researchers from ThreatLocker found a malicious Windows installer that pretends to be the legitimate LetsVPN application while deploying a remote access trojan (RAT) called GoodPersonRAT. The malware allows attackers to control infected systems using stealth techniques. The malicious installer first deploys the RAT and then installs the authentic LetsVPN application, creating an illusion of legitimacy. The package identified as Kuailian_win-setup.86.msi contains the legitimate LetsVPN installer, a loader, and an encrypted payload. GoodPersonRAT features include remote desktop control, file upload/download, command execution, proxying, keylogging, and clipboard monitoring. It specifically targets Telegram Desktop users by archiving critical account information and altering proxy settings. The malware ensures persistence through Windows services and scheduled tasks and can undermine security software. The LetsVPN installer is legitimate and signed, but the MSI package is unsigned and contains malicious components. Users are advised to download software only from official sources and verify digital signatures.

Tech Optimizer

July 8, 2026

Logical replication improvements in Amazon RDS for PostgreSQL 18

PostgreSQL logical replication has operational challenges, such as the absence of generated columns in the replication stream, replication conflicts causing apply worker halts, and lingering replication slots consuming write-ahead log (WAL) files. PostgreSQL 18 introduces enhancements to address these issues, including the ability to include STORED generated columns in the replication stream with a new publication parameter, detailed conflict counters in pg_stat_subscription_stats, automatic invalidation of idle replication slots, and the ability to toggle two-phase commit settings on live subscriptions. To set up a test environment, two PostgreSQL 18 instances (one publisher and one subscriber) are required, along with an EC2 instance for executing commands. The publisher and subscriber must have specific configurations for logical replication, including enabling logical replication and setting appropriate parameters. PostgreSQL 18 allows the replication of STORED generated columns by using the publish_generated_columns parameter. The subscriber must define these columns as regular columns. The new version also enhances conflict monitoring by providing detailed counters for different types of replication conflicts. Parallel streaming is now the default behavior for subscriptions, improving efficiency. The two-phase commit feature can now be modified on existing subscriptions without needing to recreate them. PostgreSQL 18 also introduces automatic cleanup of idle replication slots, which can be configured to invalidate unused slots after a specified duration. Considerations for implementation include ensuring that the subscriber's column types match those of the publisher for generated columns, the requirement for track_commit_timestamp for certain conflict counters, and the fact that sequences are not replicated. Cleanup of replication resources is recommended after testing to prevent unnecessary costs and WAL accumulation.

Tech Optimizer

July 7, 2026

Layered Security Essentials: Protect Your Devices from Threats

Safeguarding modern devices requires a multifaceted approach due to evolving cyber threats. A robust security framework should integrate various tools, including antivirus software, VPNs, strong authentication methods, and routine system updates. Layered security combines multiple protective measures like encryption, malware detection, and authentication controls to address diverse threats. Key practices for effective cyber hygiene include using strong passwords, timely software updates, awareness of phishing attempts, and multi-factor authentication. When using public Wi-Fi, it's crucial to verify the presence of encryption (indicated by the padlock symbol and HTTPS) before sharing personal information. Employing WPA3 encryption on home routers and changing default admin credentials are essential safeguards. Regular updates for operating systems and applications help rectify known vulnerabilities, while safe browsing habits prevent exposure to threats. Antivirus software and anti-phishing tools provide real-time monitoring, and device encryption protects stored data in case of loss or theft. Regular backups are vital to prevent data loss from ransomware or hardware issues. Phishing-resistant multi-factor authentication and passkeys offer strong defense against credential-based attacks.

Tech Optimizer

July 7, 2026

Avast Premium Security from Gen Digital – multi-device protection tuned for US households

Avast Premium Security is a multi-device security suite developed by Gen Digital, designed for U.S. households and small offices. It includes antivirus, ransomware protection, firewall, and web shield features. The product offers plans for one device, up to ten devices, or unlimited devices, with pricing around .99 per year for a single device and .99 for up to ten devices. It is compatible with Windows PCs, Macs, Android phones and tablets, and iOS devices. Key features include real-time malware scanning, advanced ransomware shields, phishing site detection, and a configurable firewall. The software operates quietly in the system tray and provides notifications when threats are detected. Avast Premium Security is positioned in a competitive market alongside brands like Norton, McAfee, Trend Micro, and Kaspersky, and is part of Gen Digital's strategy for recurring subscription revenue. The product is available for purchase online and targets U.S. households and small offices seeking comprehensive protection.

AppWizard

July 7, 2026

Chat Control 1.0: EU Council forces messenger scans via fast-track

Member states of the European Union are seeking to reinstate a previously expired regulation concerning the monitoring of encrypted communications, known as Chat Control 2.0, which mandates suspicionless scanning of encrypted messages. The Council of Ministers has proposed to reactivate a transitional regulation that allowed voluntary monitoring by technology companies, which lapsed on April 3. This move aims to close a legal gap and pressure Members of the European Parliament (MEPs) to act quickly. The expiration of the previous regulation is viewed as untenable, as it is deemed crucial for identifying at-risk children and combating illegal content online. Critics argue that the approach undermines democratic oversight and lacks transparency. The draft regulation is set to be discussed as an urgent matter just before the summer recess, with potential voting occurring when many MEPs may be absent. The regulation requires that any processed content and traffic data be deleted within twelve months unless a specific suspicion is confirmed.

Tech Optimizer

July 7, 2026

Why Anti Malware and Antivirus Solutions still matter despite Google Play Protect

Google Play Protect is a security feature integrated within the Google Play Store that scans installed applications for malicious behavior, verifies apps before download, and can disable or remove harmful software. Its primary limitation is its focus on apps from the Google Play Store, leaving users who install APK files from third-party sources at risk. Modern cyber threats include phishing links, counterfeit login pages, and social engineering techniques, which Google Play Protect does not fully address. Dedicated antivirus applications offer real-time threat detection, privacy protection, and additional features such as monitoring excessive app permissions and dark web credential leaks. For business users, mobile security platforms provide advanced capabilities like enforcing corporate policies and detecting zero-day threats. While Google Play Protect is sufficient for many users, those handling sensitive information or seeking enhanced protection should consider additional antivirus solutions. Best practices for cybersecurity include downloading apps from trusted sources, keeping software updated, and using strong passwords.

Tech Optimizer

July 6, 2026

Protect Your Business Without Ruining the Budget: Bitdefender Antivirus Plus Is Just $20

Bitdefender Antivirus Plus is currently available for .99 (regularly .99) for a one-year subscription. It offers comprehensive protection features including real-time antivirus, multi-layer ransomware defense, anti-phishing tools, and advanced threat defense. Additional privacy features include Safepay, a built-in VPN with 200MB of encrypted traffic daily, a vulnerability scanner, and anti-tracking tools. The software operates seamlessly in the background with features like Autopilot, Bitdefender Photon, and Work Mode, ensuring minimal interruptions. Prices on StackSocial are subject to change.

Tech Optimizer

July 3, 2026

Bitdefender is now offering a 1-year subscription for $20

A 1-year subscription to Bitdefender Antivirus Plus is available for .99, reduced from its regular price of .99. The software provides real-time protection against various threats, including viruses and ransomware, and includes features like a built-in VPN with 200 MB of encrypted traffic daily, a vulnerability scanner, and anti-tracking capabilities. It is designed for easy setup and light performance impact, with automatic updates and a user-friendly dashboard. This offer is available to new and existing users in the United States and Canada.

Tech Optimizer

July 2, 2026

From monolith to Lakebase to LTAP: rethinking the database from storage up

Sixteen years ago, the author began their PhD at UC Berkeley and was advised to focus on analytics rather than OLTP databases, which were considered solved. This led to the creation of Apache Spark and Databricks. However, during the development of Databricks, it was found that OLTP databases were not solved problems; they were difficult to scale and fragile. This realization led to the development of Lakebase, a serverless Postgres database designed with modern technology. Lakebase architecture separates the write-ahead log (WAL) and data files into independent, scalable services. The WAL is externalized to a service called SafeKeeper, which uses Paxos-based replication for durability, while data files are managed by PageServer, which stores them in cloud object storage. This design addresses challenges such as data loss, scaling, and performance interference between transactional and analytical workloads. Lakebase maintains compatibility with Postgres, offers unlimited storage, serverless compute, durable writes, and simpler high availability. It also introduces LTAP (Lake Transactional/Analytical Processing), which allows both transactional and analytical processing to operate on a single data copy in real time, eliminating the need for separate data copies and reducing costs. LTAP utilizes a unified storage layer that allows data to be materialized in both row and columnar formats, optimizing it for both transactional and analytical workloads. The system ensures that analytics can access the most current data without affecting transactional performance by using a log sequence number (LSN) to retrieve the latest changes. Unlike traditional CDC approaches, LTAP requires no explicit table replication, as all data is stored in a single governed copy. This architecture circumvents common issues faced by hybrid transactional/analytical processing (HTAP) systems, such as incomplete feature sets, lack of ecosystem support, and performance contention. The Lakebase architecture has unlocked capabilities like unlimited storage, elastic compute, durable writes, and instant branching, with ongoing developments anticipated in the future.

Tech Optimizer

July 2, 2026

From monolith to Lakebase to LTAP: rethinking the database from storage up

Sixteen years ago, the author began their PhD at UC Berkeley, where they were advised to focus on analytics rather than OLTP databases, which were considered a solved problem. However, upon developing Databricks, they found that OLTP databases were cumbersome, challenging to scale, and fragile. This led to the creation of Lakebase, a serverless Postgres database designed to address these issues by externalizing the write-ahead log (WAL) and data files into independent services. Lakebase architecture separates the WAL into a distributed service called SafeKeeper and data files into another service called PageServer, allowing for improved durability, scalability, and performance. This architecture eliminates data loss risks associated with disk failures and misconfigurations, simplifies high availability, and allows for elastic compute resources. Lakebase also introduces LTAP (Lake Transactional/Analytical Processing), which enables transactions and analytics to operate on a single data copy in real-time, avoiding the need for separate data copies and reducing costs. The system retains Postgres's ACID semantics while storing data in open columnar formats, making it accessible to both transactional and analytical engines without the delays and complexities of traditional replication methods. The architecture allows for unlimited storage, serverless compute, and instant branching, while ensuring that analytics can read the most current transactional data without affecting transactional workloads. LTAP aims to unify transactional and analytical processing by leveraging distinct compute engines for each workload while integrating at the storage layer.