administrators Archives

Winsage

July 27, 2026

New Certighost PoC exploit lets attackers hijack Windows domains

A proof-of-concept exploit for the "Certighost" vulnerability (CVE-2026-54121) has been released, affecting Windows Active Directory Certificate Services. This vulnerability allows authenticated attackers to compromise a Windows domain by manipulating machine account attributes to obtain certificates from AD CS, enabling them to authenticate as that machine or even as a domain controller. The flaw was reported to Microsoft on May 14, 2026, and addressed in the July 2026 Patch Tuesday updates. The vulnerability exploits a fallback mechanism in AD CS during certificate enrollment requests, allowing attackers to direct the Certification Authority to their controlled systems. The researchers demonstrated that a low-privileged user could create a machine account and use it to impersonate a domain controller, leading to potential domain compromise. Microsoft has added validation to the chase process in the July updates to prevent this exploitation. For those unable to install the updates, a temporary workaround involves disabling the chase fallback, though this has not been extensively tested.

Winsage

July 27, 2026

Microsoft moves to end pirated Windows activations

Microsoft is introducing the KMS Hardware Secured system to enhance Windows licensing security by making unauthorized activation methods more difficult. This system will use TPM-based attestation to authenticate the server managing activation requests, ensuring only legitimate devices are recognized. Readiness notifications for Windows Server 2025 will begin in August 2026, allowing administrators to prepare for the transition to TPM-based attestation, which is expected to become a requirement for KMS activation in a future Windows Server release. This initiative targets corporate clients using Windows volume licensing to complicate unauthorized activation. Additionally, Microsoft plans to reduce its workforce by approximately 4,800 positions, or nearly 2.1% of its global staff, as part of a corporate transformation strategy.

Winsage

July 27, 2026

You heard wrong, Microsoft isn’t ending pirated Windows 11 with TPM, and the new rule only affects enterprise KMS servers

On July 22, Microsoft announced the KMS Hardware-Secured requirement, linking Windows volume activation servers to a TPM chip. This initiative is aimed at organizations using Key Management Service (KMS) servers to enhance security by ensuring that KMS hosts verify their identity and integrity through the TPM before activating Windows machines. The motivation behind this requirement is to prevent unauthorized activation methods that exploit fake KMS servers. Organizations are advised to ensure their KMS hosts are certified and that TPM is enabled. The KMS Hardware-Secured measures do not target individual users with pirated copies of Windows, as most current piracy methods do not involve KMS servers. Microsoft has not pursued legal action against minor piracy instances, focusing instead on maintaining user engagement through subscriptions and services.

Winsage

July 26, 2026

Microsoft finally making much needed improvement to Windows 11 downloads and installs

A significant outage recently affected Microsoft, causing a temporary halt in Windows 11 updates through both the Windows Update channel and the Microsoft Update Catalog. Microsoft is leveraging AI technology to identify vulnerabilities within its updates, addressing security challenges. Users often encounter inconsistencies with the Windows Update progress tracker, leading to uncertainty during the download and installation phases. Microsoft has confirmed improvements in the update management process with the latest Windows 11 24H2 and 25H2 Release Preview builds, including enhancements to the Orchestrator and Arbiter logging components. The update enhances the calculation of update progress in Windows Update Settings and introduces changes to the cleanup logic for improved system performance post-update. These enhancements could benefit users with less powerful PCs, addressing concerns about sluggishness after installations.

Winsage

July 25, 2026

BackupChain Expands Hyper-V Backup for Windows Server 2025 as a Veeam Alternative

BackupChain has released an update to its backup and disaster recovery platform for Windows Server and Windows 11 users, introducing features such as faster compression, improved Hyper-V protection, expedited restores, and comprehensive backup validation. The update includes a redesigned deduplication engine that accelerates backup speeds and reduces storage usage. It also features advanced Hyper-V change tracking for efficient incremental backups and is compatible with Windows Server 2016 and later, as well as Windows 10 and 11. Restoration processes have been simplified with single-pass restores, minimizing downtime. Additionally, Deep Verification for VM backups allows for ongoing verification of the backup chain without needing to restore the virtual machine. BackupChain aims to provide robust backup technology tailored for SMBs and IT professionals, positioning itself as an alternative to larger enterprise platforms like Veeam. The latest version is now available.

Winsage

July 24, 2026

Microsoft shares some details on Azure outage that blocked Windows 11 update downloads

This week, Meta experienced a global outage affecting Facebook users, followed by Microsoft facing performance issues with its M365 services, including Teams and SharePoint. Microsoft also reported difficulties with Azure, impacting Windows 11 updates and the Microsoft Store. The issues began around 11:15 AM PST on July 23, 2026, with a notification to users about the Azure outage affecting Windows Update and related services. Microsoft initiated recovery efforts and by 1:45 PM PST, announced that the issues were resolved and services were restored. Currently, there are no ongoing issues reported on the Microsoft Service Health Status page, but the incident is documented on the Windows Release Health page.

Tech Optimizer

July 23, 2026

Optimizing PostgreSQL on Azure directly in Visual Studio Code

Poor database performance can lead to missed SLAs, delayed releases, customer dissatisfaction, and lost revenue. Microsoft has enhanced PostgreSQL on Azure, transforming it into a fully managed platform that meets enterprise demands. Azure Database for PostgreSQL and the new Azure HorizonDB offer significant performance improvements, with HorizonDB being three times faster than self-managed PostgreSQL. The PostgreSQL extension for Visual Studio Code integrates performance management into development workflows, providing tools for managing PostgreSQL throughout its lifecycle. Key features include a server metrics dashboard that displays performance indicators, Azure Advisor recommendations for actionable insights, improved query plan visualization, and AI-assisted query analysis. The extension also enhances schema design and query formulation experiences, ensuring secure and governed interactions with PostgreSQL. Azure HorizonDB is in public preview, designed for AI-native workloads. These advancements aim to reduce friction, enhance clarity, and enable faster actions for enterprise teams managing PostgreSQL at scale.

Winsage

July 23, 2026

Microsoft making a new feature mandatory requirement for Windows KMS activation

Microsoft has introduced enhancements to its Windows operating system security, including an update to Entra ID authentication with default passkeys and AI-enhanced security updates. A key advancement is the KMS Hardware-Secured initiative, which uses Trusted Platform Module (TPM)-based attestation to ensure KMS hosts operate on trusted hardware for Windows volume activation. This aims to combat risks from counterfeit KMS servers. Under the new model, KMS hosts will confirm their hardware identity using TPM before activating Windows devices. Starting in August 2026, Windows Server 2025 will provide readiness messaging for KMS host compliance with new security requirements. TPM attestation will be mandatory for KMS Hardware-Secured activation with the upcoming Windows Server 2028 LTSC release. Organizations are advised to prepare for this transition.

Winsage

July 22, 2026

Redmond’s reaper cometh: October 2026 set to bury a graveyard of Microsoft products

October 2026 will see the end of support for several Microsoft products, including Office LTSC 2021, which requires organizations to transition to LTSC 2024 or Microsoft 365 for continued support. Windows Server 2022 will exit mainstream support on October 13, 2026, while Windows 11 24H2 Home and Pro editions will also reach their end of life on the same date. The enterprise and education versions of Windows 11 23H2 will be supported until November 10, 2026. Publisher 2021 will be discontinued without a successor. Additionally, Entra ID Sign-In risk policies will be phased out on October 1, 2026, necessitating a transition to Conditional Access to maintain user and sign-in risk protection. SQL Server 2017 is scheduled for retirement in October 2027.

Winsage

July 21, 2026

Microsoft Confirms WSUS Sync Issue Causing Update Delays and Timeouts

Microsoft has identified synchronization delays and timeout errors affecting Windows Server Update Services (WSUS), which risks the timely delivery of Windows updates. WSUS is a management tool for distributing Windows updates across networks. Microsoft deprecated WSUS in September 2024 but continues to provide security fixes and updates. The synchronization issue has led to failures and delays in downloading update metadata, particularly impacting Windows 11 version 23H2 and later, Windows 10 version 1607, and Windows Server 2012 and later. This issue began around July 13, 2026, with mitigation efforts starting on July 18, 2026. Microsoft has released a partial fix for newly installed or rebuilt WSUS servers, while existing servers may still face challenges. The company is developing additional fixes and guidance. In previous years, Microsoft dealt with other WSUS-related issues affecting enterprise clients.