- Roblox crashes right when a game finishes loading
- Your phone has been warning you it’s “low on storage” lately
- Other apps are also acting sluggish or failing to update
Governments are finding it harder to suppress protests through internet shutdowns due to the use of offline messaging applications. Bitchat, an app launched in 2025 by Jack Dorsey, allows devices to communicate via Bluetooth without internet access and gained popularity during recent student protests in New Delhi amid an internet blackout. The Indian government attempted to block access to Bitchat's source code on GitHub, marking a notable first instance of trying to geoblock an open-source repository. On July 26, Bitchat had 430,000 daily active users in India, with 74% of global downloads occurring in the country from July 20 to July 26. The app has been used in various protests globally, including those in Hong Kong, Myanmar, Nepal, Uganda, Madagascar, and Iran. On July 23, the Indian government ordered GitHub to disable access to three Bitchat repositories in India quickly. Jack Dorsey expressed concerns about the Indian government's stance on Bitchat, while digital rights advocates criticized the government's actions as unnecessary. The repositories remained accessible in India and were mirrored on decentralized platforms, complicating removal efforts. India's government has increasingly scrutinized communication platforms based on their design, imposing restrictions on apps like Telegram and WhatsApp.
WinBitTorrent is a new torrent client developed using the qbittorrent-nox engine (version 5.2.3 with libtorrent 2.0.13) but features a native application interface built on WinUI 3 and the Windows App SDK 2.2, using .NET 8 and the MVVM pattern. It communicates with the engine through its Web API and can operate in both local and remote modes. Unique features include in-app torrent search with providers like RuTracker and The Pirate Bay, a movie catalog via TMDB, and a customizable context menu. WinBitTorrent is free and open-source, with an auto-update system in place.
Running PostgreSQL on Amazon EC2 requires users to manage operational tasks such as patching, backups, and security. Migrating to Amazon RDS for PostgreSQL or Amazon Aurora PostgreSQL-Compatible Edition offers a fully managed service that automates these tasks, allowing development teams to focus on application development.
The migration process uses the auto-migration feature in the Amazon RDS console, supported by AWS Database Migration Service (AWS DMS), which facilitates PostgreSQL-to-PostgreSQL migrations using native tools for accurate schema mapping and faster migration.
The migration can be executed using various methods, including pg_dump/pg_restore, manual AWS DMS tasks, or third-party tools, with the RDS console approach being preferred for its reliability and minimal setup effort. AWS DMS supports three replication modes: full load, CDC only, and full load + CDC, with the migration duration depending on database size and network throughput.
Prerequisites for migration include having a source PostgreSQL 10.4+ on Amazon EC2, a target RDS for PostgreSQL or Aurora PostgreSQL, proper IAM roles, stored credentials in Secrets Manager, and appropriate networking configurations.
Considerations include unsupported objects, potential issues with sequence values, and the need to avoid schema changes during CDC. The migration involves preparing the source database, creating necessary users and permissions, and executing the migration through the RDS console.
Post-migration, it is essential to verify data integrity, optimize performance by updating statistics and rebuilding indexes, and implement security best practices such as disabling the DMS user and enforcing SSL/TLS connections. Common troubleshooting errors during migration include permission issues, incorrect WAL levels, and connection refusals, each with specific resolutions.
Finally, to avoid ongoing charges, it is recommended to clean up resources created during the migration process, including deleting the DMS migration task, logical replication publications, Secrets Manager secrets, and the target RDS/Aurora instance.
Google has introduced a passive sign-in feature for YouTube, allowing users to stay logged in across devices without actively entering their credentials.
MeitY Secretary S. Krishnan emphasized the government's commitment to enhancing India's cybersecurity framework, highlighting the risks associated with rapid digitization. He noted the emergence of vulnerabilities exposed by platforms like Mythos and the importance of addressing these gaps. Ongoing discussions with U.S. counterparts focus on regular cybersecurity exercises and monitoring. Regarding the Tata Electronics cyber breach, the government is investigating, with preliminary findings suggesting no significant loss. Additionally, Krishnan mentioned that MeitY is reviewing feedback on username features for messaging platforms, specifically that WhatsApp has delayed its rollout until further discussions. MeitY is also examining Meta's response to the Child Sexual Abuse Material issue and is considering standardized regulations for all messaging applications.
A security researcher known as Nightmare Eclipse has revealed a new unpatched vulnerability in Windows, named LegacyHive, which is a local privilege escalation flaw in the Windows User Profile Service. This vulnerability allows attackers to access and load user hives of other accounts, including administrators. Nightmare Eclipse has provided proof-of-concept exploit code that works on systems with Microsoft's July 2026 patches. The exploit initially did not require user credentials but now necessitates them for accessing other hives. Nightmare Eclipse has previously disclosed over half a dozen zero-day vulnerabilities affecting Microsoft products. Microsoft has not yet acknowledged the LegacyHive exploit.
In digital communication, traditional messaging platforms act as persistent archives of user data, including accounts, devices, contacts, and interactions, which can hinder the essence of communication. While end-to-end encryption enhances privacy, it does not eliminate data retention. Amnesia is a concept that proposes a messaging platform emphasizing temporary communication with no permanent accounts or conversation histories. The initial prototype allows users to create one-time sessions using QR codes, ensuring that all data is destroyed once the session ends. Each session generates unique identity keys, preventing credential reuse and session token theft. The system does not retain any conversation history, reinforcing the principle that once a session is terminated, the data is irretrievable. Amnesia's relay facilitates communication without retaining user accounts or histories, and its design minimizes durable information to reduce risks. The project is currently an architectural concept and an early prototype, not ready for production or sensitive communications.
Security researcher Chaotic Eclipse has released a proof-of-concept exploit called LegacyHive, which targets a vulnerability in the Windows User Profile Service. The exploit requires standard user credentials and a third username, potentially an administrator account. It can mount the target user hive in the current user classes root and is designed to reduce the risk of public exploitation. The exploit works across all supported desktop and server versions of Windows, including those updated with the July 2026 Patch Tuesday release. Microsoft is investigating the findings related to LegacyHive.
Microsoft has patched 622 vulnerabilities, including two privilege escalation flaws in SharePoint Server (CVE-2026-56164, CVSS score: 5.3) and Active Directory Federation Services (CVE-2026-56155, CVSS score: 7.8), which are actively exploited threats. The U.S. Cybersecurity and Infrastructure Security Agency (CISA) has included these vulnerabilities in its Known Exploited Vulnerabilities catalog, requiring Federal Civilian Executive Branch agencies to implement fixes by specified deadlines.
CISA has also noted active exploitation of several SharePoint Server vulnerabilities, including CVE-2026-32201, CVE-2026-45659, and CVE-2026-56164, which allow unauthorized access to vulnerable instances. CVE-2026-56164 enables attackers to send crafted network requests to access functions that should require authorization, leading to privilege escalation without prior authentication. Additionally, CVE-2026-55040 (CVSS score: 9.1) allows remote unauthenticated attackers to bypass authentication on a vulnerable SharePoint server, enabling unauthorized operations.
Meta-owned WhatsApp has responded to the Indian government's notice concerning its proposed "username" feature, which aims to allow users to communicate without sharing phone numbers. The Indian government expressed concerns about potential risks such as online fraud and impersonation. WhatsApp requested more time to address these issues and confirmed that the feature will not launch in India until discussions are complete. The Ministry of Information Technology is currently reviewing WhatsApp's submission. Other messaging platforms, including Telegram and Signal, have also received similar notices. WhatsApp plans to implement measures to mitigate impersonation risks, such as allowing only legitimate owners to claim high-profile names and requiring users to know exact usernames to initiate contact. The platform will limit the number of new contacts an account can reach and provide information about the sender's account status when a user receives a message via a username.
