triggers Archives

BetaBeacon

June 26, 2026

Android 17’s new foldable gaming mode could make flippy phones more fun

Android 17 is introducing a dedicated gaming mode for foldable devices that features a virtual gamepad with touch controls. The virtual gamepad includes a D-pad, virtual sticks, action buttons, triggers, and more, and can be customized to suit user preferences. The mode is compatible with games that support physical controllers and can be easily activated by unfolding the device. The goal is to enhance the gaming experience on Android devices and cater to users who prefer physical controls for certain games.

AppWizard

June 25, 2026

Riot Vanguard finally drops its controversial always-on requirement for anti-cheat — new on-demand mode requires a strict Windows 11 security stack

Riot Games has introduced a new feature for its Vanguard anti-cheat system called Vanguard On-Demand, which allows the kernel driver to load only when a Riot game is launched and unload upon exit. This change ends the previous practice of loading the driver at Windows start-up, which has been in place since 2020. The new mode is supported by Windows 11 25H2 and requires specific hardware configurations, including UEFI Secure Boot, TPM 2.0, Virtualization-Based Security (VBS), Hypervisor-Protected Code Integrity (HVCI), and IOMMU. Approximately 35% of players currently meet these hardware requirements, while around 3% are using incompatible systems. Riot has created a checklist called Vanguard Pre-Check to help players determine if their systems qualify. The percentage of fully secured machines is estimated to be around 34.33% and is increasing monthly. Players whose systems do not meet the criteria will need to make manual adjustments in their BIOS. Vanguard On-Demand mode will be available for players on Windows 11 starting later today. The feature is based on Microsoft’s Runtime Driver Attestation Report, which tracks driver activity since boot and helps ensure no vulnerable drivers have been loaded while Vanguard is inactive. Riot Games has required TPM 2.0 and Secure Boot on Windows 11 since 2020 and has faced criticism for these requirements. Enabling VBS and HVCI may affect frame rates and could disable older peripheral drivers due to Microsoft's vulnerable driver blocklist.

AppWizard

June 24, 2026

Minecraft mod hides malware sweeping Australian gaming communities

A new US price point in cybersecurity has made advanced cyber capabilities accessible to a wider audience, including individuals who may want to cause harm for personal reasons rather than financial gain. In Australia, personal cyber insurance products have traditionally focused on risks like identity theft and financial fraud, driven by economic incentives. As the nature of cyber threats evolves, existing insurance products may not adequately cover risks from individuals motivated by personal grievances, prompting a need for insurers to reevaluate coverage, risk assessment, and customer education.

Winsage

June 24, 2026

Windows RAT Uses Encrypted HTTP C2 and Registry Persistence After npm Infection

A malware campaign targets Windows systems through a malicious npm package named postcss-minify-selector-parser, which mimics the legitimate postcss-selector-parser. This counterfeit package installs a Remote Access Trojan (RAT) on developer machines, beginning with a multi-stage attack triggered by the installation of the package. The RAT can steal credentials, execute shell commands, and communicate with a remote attacker. Security researchers at JFrog identified this threat and reported it on June 22, 2026, noting that two additional related packages, postcss-minify-selector and aes-decode-runner-pro, are linked to the same publisher and remain live on the npm registry. The RAT employs encrypted HTTP communication with a command-and-control (C2) server and ensures persistence by creating a registry key under the Windows Run key. It has capabilities for remote shell execution, file uploads and downloads, and can steal saved login data from Google Chrome using Windows decryption APIs. The malware is designed for organized batch exfiltration of stolen data. Indicators of compromise include specific IP addresses, domains, file paths, and SHA-256 hashes associated with the malware components. JFrog advises users to remove the malicious packages, inspect their dependency trees, and treat any stored credentials as compromised.

Winsage

June 24, 2026

“This is the gaming handheld we’ve been waiting for” — MSI Claw 8 EX AI+ review of a masterpiece priced for the few

The MSI Claw 8 EX AI+ is a gaming handheld powered by Intel's Arc G3 Extreme processor, priced at 9.99. It features an 8-inch FHD+ display (1920x1200) with 500 nits brightness and supports variable refresh rates from 48Hz to 120Hz. The device includes Hall-Effect analog sticks, tactile buttons, and dual front speakers with Bluetooth Core 6.0 support. It scored 6,726 on the 3DMark Time Spy benchmark. The 80Whr battery lasts approximately 3.5 hours on demanding games and over five hours on lighter titles. It has Wi-Fi 7 connectivity and dual Thunderbolt 4 ports for desktop functionality when docked.

Winsage

June 23, 2026

AMD Tells Windows 10 Owners To Roll Back Their Drivers As Adrenalin 26.6.2 Triggers A Yellow Bang Error

Many users of Windows 10 are experiencing issues with the AMD Adrenalin Edition 26.6.2 graphics driver, which fails to launch properly and shows a yellow exclamation mark in Device Manager. AMD has acknowledged the problem, attributing it to an incompatibility with Windows 10, and has advised users to revert to the previous driver version, Adrenalin Edition 26.6.1. This earlier version does not support FSR 4.1 for RX 7000 series GPUs. There have also been rare reports of similar errors on RX 9000 series systems. AMD's engineers are investigating the issue and working on a solution.

Tech Optimizer

June 20, 2026

PostgreSQL 18 on Amazon Aurora and Amazon RDS: Security, monitoring, and developer enhancements

PostgreSQL version 18 has deprecated MD5 password authentication in favor of SCRAM-SHA-256, with a new parameter, md5_password_warnings, enabled by default to log deprecation warnings. It has enhanced monitoring capabilities by adding columns to pg_stat_database and pg_stat_statements to track parallel worker activity, with the default max_parallel_workers_per_gather set to 0 in Aurora PostgreSQL. The pg_stat_subscription_stats view now includes new columns for tracking conflict types in logical replication. Optimizer statistics are automatically transferred during upgrades, while uuidv7() generates timestamp-ordered UUIDs. The default streaming option for CREATE SUBSCRIPTION has changed to parallel, and the idle_replication_slot_timeout parameter automatically invalidates inactive replication slots. Enhancements to the COPY command include REJECT_LIMIT for error tolerance and a silent LOG_VERBOSITY level. OLD and NEW aliases have been introduced in RETURNING clauses for various DML commands.

Tech Optimizer

June 20, 2026

PostgreSQL 18 on Amazon Aurora and Amazon RDS: Performance enhancements

PostgreSQL 18 addresses common performance challenges for users, including managing query performance across composite indexes, diagnosing memory spills in materialized Common Table Expressions (CTEs), and upgrading major versions without plan regressions. Key enhancements include skip scan optimization for multicolumn indexes, improved EXPLAIN functionality, and optimizer statistics that persist through major version upgrades. Skip scan optimization allows PostgreSQL to efficiently utilize multicolumn B-tree indexes even when leading columns are not specified in the WHERE clause, significantly improving query performance. The EXPLAIN command has been enhanced to include buffer statistics by default, providing deeper insights into query execution and resource usage. PostgreSQL 18 also introduces visibility into the storage of materialized nodes in query plans, indicating whether intermediate results were stored in memory or spilled to disk. A new metric, Index Searches, has been added to EXPLAIN ANALYZE output, indicating how many times the database traversed the index tree during query execution. Additionally, Self-Join Elimination (SJE) automatically detects and removes unnecessary inner joins of a table to itself, optimizing query performance. The autovacuum mechanism has been improved with the introduction of autovacuum_vacuum_max_threshold, which caps the number of dead tuples that can accumulate before autovacuum triggers a VACUUM, addressing issues with large tables. The vacuum_truncate parameter provides a server-wide control point to disable VACUUM’s file truncation behavior, reducing locking issues on busy systems. PostgreSQL 18 also separates the allocation of autovacuum worker slots from their usage, allowing for dynamic adjustments to autovacuum_max_workers without requiring a server restart. Finally, new columns in pg_stat_all_tables track cumulative time spent on maintenance operations, providing better insights into maintenance overhead for each table.

AppWizard

June 20, 2026

Minecraft Update 3.40/1.050 Released on June 19

Mojang has released a hotfix for Minecraft, designated as update 3.40/1.050 for console players, to address various issues following the Chaos Cubed update. The hotfix does not include a changelog, but players have reported several issues it aims to fix, including: - Pillagers and piglins maintain their loaded crossbow pose during their death animation. - Misalignment of the cursor position when opening the inventory. - Killing endermen, bees, and wolves in creative mode triggers their rage state upon death. - Incorrect textures for pillagers and blazes. - Performance issues on the PS5 version. - Fluctuating volume of goat horns based on the player's vertical view. - Breakage of old experimental sulfur cube tops. - Black stripes visible on water from a distance. - Transparent layer of sulfur cubes visible through certain blocks. - Problems with the image preview gallery in the profile menu. - Visual glitch in the menu background after logging out of a server. - Crashes on Nintendo Switch during world loading. - Delays in quick and precise inputs. - Reversion of the Japanese font from Noto Sans. - Unexpected distortion of textures within Minecraft. - Mouse functionality ceasing while in-game. - Mutton not appearing in the “new recipe unlocked” screen. - Chaos Cubed notification disabling wireless controller input. - Two Torch Clocks have stopped functioning.

Winsage

June 19, 2026

Microsoft Details Windows Clipper Malware Campaign Using USB LNK Worm and Tor-Based C2

Microsoft has identified a Windows-based cryptocurrency clipper campaign that has been active since February 2026. This campaign uses clipboard-intercepting malware with self-spreading capabilities and operates through the Tor network. The clipper malware employs Windows Script Host and ActiveX to launch a Tor proxy and connect to a hidden command-and-control server. It focuses on stealing clipboard data, particularly cryptocurrency wallet addresses, and can exfiltrate screenshots. The malware is distributed via malicious Windows Shortcut (LNK) files on USB drives, which activate a worm that checks for existing infections and fetches the payload from a remote server. The clipper monitors the clipboard every 500 milliseconds for sensitive information and can replace copied wallet addresses with those controlled by attackers. Microsoft recommends behavioral detections, disabling AutoRun for removable media, blocking LNK execution from drives, and monitoring clipboard-related activities as mitigations against this threat.