writing Archives

Winsage

June 24, 2026

Windows 11 Secure Boot update released to all, hours ahead of expiry

Microsoft has begun rolling out the Secure Boot 2023 certificate update for eligible Windows 11 and Windows 10 PCs ahead of the expiration of the original certificates on June 24, 2026. The update includes additional device targeting data to increase coverage for automatic updates. Devices receive the new certificates after demonstrating successful update signals. The original Secure Boot certificates were issued in 2011, with expiration dates set for June 24, 2026, June 27, 2026, and October 19, 2026. Microsoft has been distributing replacement 2023 certificates since 2024, with the June 2026 update expanding eligible devices significantly. Users can check their Secure Boot status through the Windows Security app or System Information. If a PC did not receive the update, it will still function normally but may not receive future boot-level security updates. Multiple restarts after updates are expected behavior, and the SecureBoot folder in Windows is not malware. Windows 10 users in the Extended Security Updates program are also receiving the Secure Boot update. The expiration of the Microsoft Corporation KEK CA 2011 on June 24 means no new Secure Boot revocation payloads can be signed with the old key, but existing signed payloads will continue to function.

AppWizard

June 24, 2026

Drifters: Blackout Crew Is A New Co-op Sci-Fi Extraction Shooter Coming To PC VR & Quest

Salmi Games has announced its new project, Drifters: Blackout Crew, a virtual reality co-op extraction shooter, set to launch on Meta Quest and SteamVR platforms. In the game, players are stranded in deep space and must complete missions in fortified facilities to gather resources for upgrades and enhancements. It supports cooperative gameplay for up to four players and features tactile weapon handling and a jetpack for dynamic movement. The game aims to establish a unique identity in the VR extraction shooter genre, which includes popular titles like Ghosts of Tabor. Salmi Games, a German developer, has a history of providing ongoing support for its titles, with expectations for similar support for Drifters. The project has received funding from the German Federal Government Commissioner for Culture and the Media. Players can wishlist the game on Meta Quest and Steam, but there is no announcement for PlayStation VR2.

Winsage

June 23, 2026

AMD Tells Windows 10 Owners To Roll Back Their Drivers As Adrenalin 26.6.2 Triggers A Yellow Bang Error

Many users of Windows 10 are experiencing issues with the AMD Adrenalin Edition 26.6.2 graphics driver, which fails to launch properly and shows a yellow exclamation mark in Device Manager. AMD has acknowledged the problem, attributing it to an incompatibility with Windows 10, and has advised users to revert to the previous driver version, Adrenalin Edition 26.6.1. This earlier version does not support FSR 4.1 for RX 7000 series GPUs. There have also been rare reports of similar errors on RX 9000 series systems. AMD's engineers are investigating the issue and working on a solution.

Tech Optimizer

June 23, 2026

Active Exploitation of Critical CVE-2026-20253 in Splunk Enterprise: Unauthenticated RCE via PostgreSQL Sidecar Service

A critical security vulnerability, SVD-2026-0603 (CVE-2026-20253), has been identified in Splunk Enterprise versions 10.0.0 through 10.0.6 and 10.2.0 through 10.2.3. This flaw allows unauthenticated, remote attackers to create or truncate arbitrary files on the host system by exploiting the PostgreSQL Sidecar Service endpoints. The vulnerability is actively exploited, with public proof-of-concept code available, and has been added to the CISA Known Exploited Vulnerabilities (KEV) list. Successful exploitation can lead to full remote code execution (RCE) as the Splunk user. The vulnerability arises from inadequate authentication controls on the PostgreSQL Sidecar Service endpoints, specifically /v1/postgres/recovery/backup and /v1/postgres/recovery/restore, which are accessible without authentication. It is classified under CWE-306: Missing Authentication for Critical Function and has a CVSS v3.1 base score of 9.8 (Critical). Attackers can exploit the vulnerability by sending crafted HTTP POST requests to the exposed endpoints, allowing them to create or truncate files and potentially execute malicious scripts. Indicators of compromise include unexpected files in directories such as /tmp/ or /opt/splunk/var/run/supervisor/pkg-run/, modified Splunk Python scripts, and unusual outbound connections from Splunk to unknown PostgreSQL servers. The vulnerability aligns with several MITRE ATT&CK techniques, including T1190 (Exploit Public-Facing Application) and T1059 (Command and Scripting Interpreter). Active exploitation of CVE-2026-20253 has been confirmed, and it is likely that both opportunistic cybercriminals and sophisticated threat actors will use this exploit. The affected versions of Splunk Enterprise are 10.2.0 through 10.2.3 and 10.0.0 through 10.0.6, with the issue resolved in versions 10.2.4 and 10.0.7. Organizations are advised to upgrade to fixed versions or disable the PostgreSQL Sidecar Service as a mitigation strategy.

Tech Optimizer

June 20, 2026

PostgreSQL 18 on Amazon Aurora and Amazon RDS: Performance enhancements

PostgreSQL 18 addresses common performance challenges for users, including managing query performance across composite indexes, diagnosing memory spills in materialized Common Table Expressions (CTEs), and upgrading major versions without plan regressions. Key enhancements include skip scan optimization for multicolumn indexes, improved EXPLAIN functionality, and optimizer statistics that persist through major version upgrades. Skip scan optimization allows PostgreSQL to efficiently utilize multicolumn B-tree indexes even when leading columns are not specified in the WHERE clause, significantly improving query performance. The EXPLAIN command has been enhanced to include buffer statistics by default, providing deeper insights into query execution and resource usage. PostgreSQL 18 also introduces visibility into the storage of materialized nodes in query plans, indicating whether intermediate results were stored in memory or spilled to disk. A new metric, Index Searches, has been added to EXPLAIN ANALYZE output, indicating how many times the database traversed the index tree during query execution. Additionally, Self-Join Elimination (SJE) automatically detects and removes unnecessary inner joins of a table to itself, optimizing query performance. The autovacuum mechanism has been improved with the introduction of autovacuum_vacuum_max_threshold, which caps the number of dead tuples that can accumulate before autovacuum triggers a VACUUM, addressing issues with large tables. The vacuum_truncate parameter provides a server-wide control point to disable VACUUM’s file truncation behavior, reducing locking issues on busy systems. PostgreSQL 18 also separates the allocation of autovacuum worker slots from their usage, allowing for dynamic adjustments to autovacuum_max_workers without requiring a server restart. Finally, new columns in pg_stat_all_tables track cumulative time spent on maintenance operations, providing better insights into maintenance overhead for each table.

Winsage

June 19, 2026

MacBook Neo vs Windows Laptops for Cybersecurity Tasks

The laptop has evolved into a crucial tool for cybersecurity, serving as a workstation for malware analysis and daily operations. A debate exists between the merits of MacBook Neo and Windows-based models, with Windows offering flexibility and compatibility, while macOS is favored for stability and build quality. Popular penetration testing tools are available on both platforms, but Windows laptops have an advantage due to better integration with x86 environments and specialized drivers. Virtualization is essential in cybersecurity, and Windows laptops with higher RAM provide a better experience for running multiple virtual machines compared to the non-upgradable RAM of the MacBook Neo. Intensive tasks can strain systems, necessitating efficient resource management, especially on the MacBook Neo. Most malware is designed for Windows, making it crucial for analysts to be familiar with Windows-specific tools and features. The MacBook Neo is beneficial for tasks like working with event logs and writing automation scripts, while its battery life and mobility are advantageous for professionals on the go. Security considerations play a significant role in the choice of operating system, with Windows being a common target for attackers, whereas macOS has stricter access controls. Windows laptops offer more price flexibility and upgradeability, while the MacBook Neo focuses on simplicity and build quality but lacks upgrade options. Ultimately, Windows is optimal for tasks involving malware analysis and virtual labs, while the MacBook Neo suits those focused on development and network analysis.

Winsage

June 18, 2026

This $13 Windows 11 Pro offer is too good to ignore

Microsoft is currently offering Windows 11 Pro for .97, down from its regular price of 9.99, representing a discount of 0.03. Windows 11 Pro includes features such as BitLocker encryption, Hyper-V virtualization, Windows Sandbox, TPM 2.0 support, Snap Layouts, improved search functionality, multi-monitor support, and Copilot, Microsoft's AI assistant.

Winsage

June 18, 2026

This $13 Windows 11 Pro offer is too good to ignore

Microsoft Windows 11 Pro is currently available for .97, reduced from its regular price of 5.00, offering a savings of 5.03. Key features include BitLocker encryption, Hyper-V virtualization, Windows Sandbox, TPM 2.0 support, and advanced authentication protections. Productivity enhancements consist of Snap Layouts, improved desktop organization, voice typing enhancements, better search functionality, and seamless multi-monitor support. The integration of Microsoft’s AI assistant, Copilot, assists with content summarization, answering queries, generating writing prompts, and coding suggestions.

Winsage

June 17, 2026

Windows devs rerolled old code to save precious bytes

Veteran Microsoft engineer Raymond Chen shared a story about the development of an x86-32 emulator that utilized binary translation, significantly improving performance compared to traditional emulation methods. During the project, the team faced an issue where a function allocated 64 KB of memory but was optimized by a compiler into 65,536 instructions, leading to 256 kilobytes of code being used to initialize the data. In response to this inefficiency, the engineers modified the translator to replace the inefficient function with a more compact loop, highlighting their commitment to memory efficiency during a time when operating systems prioritized resource conservation.

AppWizard

June 15, 2026

Both Final Fantasy 7 remakes are dirt cheap right now in a franchise sale—but I think you should play FF12 and enjoy the series’ best combat system at a discount, too

The first installment of the Final Fantasy 7 remake is priced around £12, and its sequel, Rebirth, is approximately £16 during a sale on Steam. Final Fantasy 12 is available for £11 and features a unique combat system known as the Gambit system, which allows players to set conditional commands for party members. The Zodiac Age version includes enhancements such as accelerated gameplay. FF12 is characterized by its grand adventure, political intrigue, and the partnership between characters Balthier and Fran.