administrators

Winsage
October 16, 2026
The Windows security update scheduled for October 2026 will block requests using the outdated NTLMv1 security protocol. The BlockNtlmSSO registry value governs this change; if unset, Windows will default to Enforce mode, blocking NTLMv1-derived credentials. Administrators can temporarily set this value to 0 to allow NTLMv1, but Microsoft warns this reduces security. The deprecation of NTLM was first announced in 2024, with audit logs for NTLMv1 usage introduced in August 2025. NTLM was first introduced in 1993, and while it has been removed from Windows 11 24H2 and Windows Server 2025, traces remain in certain configurations. Credential Guard must be enabled, and the BlockNtlmSSO value must not be set to Audit mode for NTLMv1-derived credentials to be allowed. Microsoft aims to eliminate NTLM entirely, and the upcoming update signals the need for organizations to accelerate their transition away from NTLMv1.
Winsage
October 16, 2026
Microsoft Edge is developing a seamless-updates prototype that allows security updates to be applied without interrupting users' work. Currently, the browser has a Restart to update on idle feature that applies updates when devices are not in use. The goal is to eliminate the need for users to click an update button, enabling background updates that do not disrupt ongoing tasks. Microsoft Edge can also issue patches independently of the Chromium release schedule for urgent security needs. Additionally, Security Update Alerts help organizations manage updates by notifying administrators about critical updates and vulnerabilities. These alerts are available for managed Windows devices through the Edge management service without additional licensing.
Winsage
October 15, 2026
Windows Server 2022 has transitioned from mainstream support to extended support, which will last until October 2031. Mainstream support will end on October 13, 2026, with the last security update released in that month. Extended support will continue to provide essential security updates at no additional cost until October 14, 2031. Hotpatching for Windows Server 2022 will be available until October 2027 for Datacenter: Azure Edition. Microsoft recommends upgrading to Windows Server 2025, which will have mainstream support until November 2029 and extended support until November 14, 2034. Windows Server 2025 is set for general availability by November 2024. A free 180-day trial of Windows Server 2025 is available. Additionally, devices running Windows 11 24H2 Home and Pro editions will no longer receive updates, and users are advised to upgrade to Windows 11 26H2 to maintain security. Microsoft warns users of unsupported Windows versions to upgrade to avoid losing access to critical security updates after next year's Windows Update certificate rotation.
Winsage
October 14, 2026
Microsoft's October 2026 security updates address 1,411 vulnerabilities, marking the largest Patch Tuesday release to date. The update includes 70 vulnerabilities classified as Critical, with 57 related to remote code execution, 11 to elevation of privilege, and two to spoofing. Key vulnerabilities include CVE-2026-96951, a Windows Shell security bypass being actively exploited, CVE-2026-108398, which affects .NET Framework and allows bypassing Windows Defender Application Control, and CVE-2026-92707, a denial-of-service vulnerability in MessagePack-CSharp. The release coincides with critical Windows support deadlines, with the final regular update for Windows 11 24H2 Home and Pro and Windows 10 Enterprise LTSB 2016 occurring on October 13. Organizations are advised to prioritize the exploited vulnerabilities, ensure relevant updates are applied, and validate application-control behavior.
Winsage
October 12, 2026
Microsoft has reminded IT administrators about the expiration of certificates that enable trusted connections between Windows devices and Windows Update servers, set to expire in May and June of 2027. Devices without replacement certificates by these deadlines may lose access to Windows Update services. Most supported Windows devices will receive new certificates automatically through security updates, but older or infrequently updated systems may require manual intervention. Organizations that do not update their devices risk losing access to critical updates, particularly unsupported Windows versions that will not receive necessary certificate updates. IT teams should audit device inventories and ensure compliance with updates, as systems on supported versions will obtain replacement certificates seamlessly. Upgrading unsupported systems is essential, and organizations are encouraged to conduct audits and expedite upgrade projects to avoid losing access to Windows Update.
Winsage
October 12, 2026
Windows 11 version 24H2 for Home and Pro systems will stop receiving security updates on October 13, 2026. After this date, these editions will not receive any updates or technical support, although they will still boot. Windows 11 Enterprise, Education, IoT Enterprise, and Enterprise multi-session editions will continue to receive support until October 12, 2027. Organizations are advised to verify their systems' versions and editions, especially for those without endpoint management systems. Windows 11 25H2 and 26H2 are available as upgrade options, with 25H2 supported until October 12, 2027, and 26H2 supported until October 10, 2028, for Home and Pro editions. The rollout of 26H2 will be phased, and safeguard holds may be implemented if compatibility issues are detected. Unmanaged Home and Pro devices on 24H2 will automatically receive 25H2, while managed devices may require IT intervention. Regular monitoring and proactive management of Windows versions are necessary to ensure compliance and avoid future deadlines.
AppWizard
October 12, 2026
On the evening of October 9, users attempting to access ChatGPT on Android devices encountered the message "This content is unavailable in this version of the app" due to an issue from OpenAI. The problem began at 21:00:39Z and lasted for three hours and 26 minutes, concluding at 00:26:44Z on October 10. OpenAI advised users to switch to the web version while they worked on a fix for older app versions. A second major incident occurred 48 minutes later, locking workspace administrators out of plugin settings from 21:48:34Z to 23:26:59Z on October 9, totaling one hour and 38 minutes. Both incidents overlapped entirely, with the Android issue persisting for an additional hour after the admin issue was resolved. As of 21:42 UTC on October 10, a third minor incident regarding "Delayed Costs data in the Compliance API" remained unresolved, having started at 17:23:18Z on October 9. OpenAI reported that some customers might experience incomplete Costs data while the backlog was addressed, with the catch-up process expected to continue through October 11. ChatGPT usage and API Platform requests were unaffected, and the overall status was designated as "Partial System Degradation." Additionally, a more significant outage occurred on September 29, lasting five hours and 22 minutes and affecting 30 components, which was more extensive than the incidents on October 9. Neither of the major incidents on October 9 impacted the API.
Winsage
October 11, 2026
Windows machines that are not current with updates will face changes in access to Windows Update due to two critical certificate expirations on May 17, 2027, and June 19, 2027. Supported versions must install specific security updates before these dates to maintain access. - Windows 11, version 25H2 and later: No action required. - Windows 11, version 24H2 and Windows Server 2025: Must install the September 2025 Windows security update or later, before June 19, 2027. - Other in-support Windows 11 versions and Windows Server 2022: Must install the July 2026 Windows security update or later, before June 19, 2027. - In-support Windows 10 versions: Must install the July 2026 Windows security update or later, before June 19, 2027. - Windows 10 Enterprise 2019 LTSC, Windows Server 2019, and Windows Server 2016: Must install the July 2026 Windows security update or later, before May 17, 2027. - Any other Windows version: Upgrade to a supported release to maintain access. Devices that are up to date will continue receiving updates without interruption, while those that are behind will lose access to Windows Update services after the expiration dates. Out-of-support versions will lose access entirely. The notice regarding the certificate expiration was posted on October 8, 2026, and reiterated on October 10, 2026.
Winsage
October 9, 2026
Microsoft has transitioned its Execution Containers capability into general availability, creating a secure environment for AI agents on Windows 11. Nvidia's CEO praised Microsoft's MXC architecture as a revolutionary foundation for application development. Organizations are increasingly relying on managed service providers to navigate AI tools. The general availability of Microsoft Execution Containers allows organizations to define access for AI agents, with real-time policy enforcement. The open-source MXC library integrates across Windows, macOS, and Linux, helping manage agent interactions and mitigate risks. Microsoft is enhancing the Copilot experience with hybrid intelligence features and revamping Windows Search for better performance. Preorders for new Copilot+ PCs powered by Nvidia's RTX Spark technology are open, with shipments starting on October 16. Device partners like Dell, HP, and Lenovo are also launching AI PCs on the same date. Later this year, Dell and HP will introduce Nvidia’s DGX Station technology to enable local running of frontier-class AI models on Windows devices.
Search