NewApp Digest
search bot

US

Windows 11 keeps forcing unwanted updates with "too many coincidences" — Microsoft's plan or just user error?
Winsage
March 11, 2026

Windows 11 keeps forcing unwanted updates with “too many coincidences” — Microsoft’s plan or just user error?

Windows updates in Windows 11 can be rolled out automatically or manually through the Settings app. Users have reported an increase in unsolicited upgrades to the latest version of Windows, prompting concerns and frustrations directed towards Microsoft. IT expert Günther Born noted "too many coincidences" regarding these updates. Microsoft plans to automatically install the latest feature update (25H2) on older versions that have reached their end of service. Speculation suggests that unwanted upgrades may be linked to Microsoft's enablement packages, which facilitate version transitions. A user reported an automatic upgrade from Windows 10 to Windows 11 while they were away. Disabling TPM 2.0 should theoretically prevent automatic upgrades, but this has proven complex. Microsoft will discontinue support for Windows 11 version 24H2 on October 13, 2026, after which users will need to upgrade to version 25H2 for continued security updates.
Attackers Use Malformed ZIP Archives to Evade Antivirus and EDR Tools
Tech Optimizer
March 11, 2026

Attackers Use Malformed ZIP Archives to Evade Antivirus and EDR Tools

Cybersecurity researchers at the CERT Coordination Center (CERT/CC) have identified a new evasion technique, VU#976247, used by threat actors to exploit malformed ZIP archives and bypass Antivirus (AV) and Endpoint Detection and Response (EDR) systems. Attackers manipulate the internal headers of ZIP files, particularly altering the compression method field, which causes security tools to fail in analyzing the malicious payload. While some security products may flag the modified files as corrupted, they often do not detect the underlying malicious code. Standard extraction tools typically trust the tampered metadata and may return errors, leaving the hidden payload undisclosed. Attackers use custom malware loaders to extract and execute the malicious data, circumventing traditional AV detection. Cisco has been confirmed as affected, while other vendors, including AhnLab, Avast, Bitdefender, and Avira, have an “Unknown” status regarding their vulnerability. To mitigate this threat, organizations should enhance archive handling processes, avoid relying solely on declared metadata, adopt aggressive detection modes, flag metadata inconsistencies, and consult with AV and EDR providers about vulnerabilities.
Moving AI apps from prototype to production requires enterprise-grade postgres infrastructure
Tech Optimizer
March 11, 2026

Moving AI apps from prototype to production requires enterprise-grade postgres infrastructure

By 2024, 78% of organizations are expected to utilize AI, a significant increase from previous years. However, 90% of technology leaders struggle to measure the return on investment from AI initiatives. Traditional databases are inadequate for AI applications due to limitations in features like vector similarity search and semantic retrieval. Many organizations face challenges in integrating AI applications with existing databases, particularly when migrating legacy systems to the cloud. Security and compliance are critical for AI applications in regulated industries, requiring audit trails, data encryption, and adherence to standards like HIPAA and GDPR. The absence of dedicated vendors for transitioning AI from prototyping to production is notable, with no Postgres vendor focusing solely on AI integration until recently. Anthropic's open-source Model Context Protocol (MCP) has emerged as a standard for connecting AI agents to data sources, easing integration challenges. The underlying database architecture is crucial for supporting enterprise-grade AI applications, with Postgres being a common choice. The pgEdge Agentic AI Toolkit for Postgres provides a solution for building production-ready AI applications while ensuring availability, security, and compliance.
Malformed ZIP Files Allows Attackers to Bypass Antivirus and EDR Detections
Tech Optimizer
March 11, 2026

Malformed ZIP Files Allows Attackers to Bypass Antivirus and EDR Detections

A vulnerability identified as CVE-2026-0866 allows malicious actors to exploit malformed ZIP headers to bypass antivirus and Endpoint Detection and Response (EDR) systems. This flaw occurs because most security solutions rely on metadata within ZIP archives to scan and process files. When the compression method field is altered, security scanners may fail to decompress the archive correctly, resulting in a false negative and leaving the malicious payload undetected. Attackers can then use a custom loader to access the embedded malicious data, circumventing standard extraction tools. Cisco has been confirmed as affected by this vulnerability, while nearly 30 other security vendors have not disclosed their status. The cybersecurity community is urged to evolve scanning methodologies, including not relying solely on declared metadata and implementing aggressive detection modes. Organizations should verify their antivirus and EDR solutions for vulnerability to CVE-2026-0866 and monitor for custom loaders.
Disguise Renews Licensing Deal for ‘Minecraft’ Costumes
AppWizard
March 6, 2026

Disguise Renews Licensing Deal for ‘Minecraft’ Costumes

Disguise Inc. has renewed its multi-year licensing agreement for Minecraft, marking a significant milestone in their collaboration. The success of A Minecraft Movie, which premiered on April 4, 2025, increased fan engagement and demand for related merchandise, prompting Disguise to offer authentic character costumes. A second film is in development for release in 2027, ensuring Disguise will continue to design, develop, and distribute costumes and accessories for the Minecraft franchise.
A buggy Windows 11 update locked my Xbox Ally X for 12 hours
Winsage
March 6, 2026

A buggy Windows 11 update locked my Xbox Ally X for 12 hours

The author experienced frustration with the Xbox Ally X handheld, which, despite its impressive hardware, feels unfinished and struggles due to limitations of Windows 11. An update intended for the device led to a critical failure, displaying a message that the device couldn't be repaired, potentially due to corrupted boot files from the update. This incident raises concerns about the reliability of future Xbox devices built on PC architecture, especially if simple updates can result in system failures.
Search