advisory Archives

Winsage

August 8, 2025

Hackers can bypass Microsoft Defender to install ransomware on PCs

A significant vulnerability in Microsoft Defender has been identified, allowing hackers to bypass the software and deploy Akira ransomware. This vulnerability exploits the legitimate driver rwdrv.sys, associated with the Intel CPU tuning tool ThrottleStop, granting cybercriminals kernel-level access to a target PC. Once access is obtained, hackers can introduce the driver hlpdrv.sys to manipulate the Windows Registry, disabling Microsoft Defender's protective measures. GuidePoint Security has noted that this method has been increasingly used in Akira ransomware attacks since July of this year. Users are advised to use reputable antivirus software and keep it updated to protect against such threats.

Winsage

July 29, 2025

Windows 10 will soon slam shut for millions of ageing PCs

Microsoft will end support for Windows 10 on October 14, creating operational and financial challenges for users in the Middle East, particularly businesses. Windows 10 is widely used in the region, with Saudi Arabia at 53%, Oman at 57%, Egypt at 66%, and the UAE at 43%. Organizations that have invested in Windows 10 may face compliance and security risks due to the lack of critical updates post-deadline. Transitioning to Windows 11 can be a lengthy process for companies, requiring updates or replacements for millions of devices. Microsoft offers an extended security updates (ESU) service for a fee, which provides limited updates for up to three years but does not cover all vulnerabilities. The ESU program is intended to encourage organizations to adopt Windows 11, but rising costs may make it an unviable long-term solution for some. Businesses must carefully consider the costs of upgrading versus the risks of remaining on an unsupported operating system.

AppWizard

July 24, 2025

Innovative Designs Recalls Minecraft Light-Up Slap Ruler Bracelets Due to Risk of Serious Injury or Death from Button Cell Battery Ingestion Hazard; Violates Mandatory Standard for Toys

Innovative Designs LLC, based in New York, has recalled a toy due to safety concerns involving its battery, following a report of a battery separating from the toy. The affected toys were sold at Walmart from March 2025 to May 2025, priced at approximately $XX. Consumers can contact Innovative Designs at info@innovativenyc.com for refunds. The recall number is 25-404, and the U.S. Consumer Product Safety Commission (CPSC) oversees the recall process. Consumers are advised to handle button cell and coin batteries properly and dispose of them according to local hazardous waste procedures.

Winsage

July 22, 2025

Microsoft: Windows Server KB5062557 causes cluster, VM issues

Microsoft has identified an issue with the Cluster service on Windows Server 2019 following the installation of the July security update KB5062557, released on July 8th. This issue causes the Cluster service to repeatedly stop and restart, leading to nodes failing to rejoin the cluster, entering quarantine states, and causing virtual machines to restart multiple times. Administrators using BitLocker on Cluster Shared Volumes may also face additional errors. Microsoft has advised affected organizations to contact their business support teams for assistance while a mitigation strategy is being developed. Additionally, Microsoft is working on a resolution to be included in a future Windows update.

Winsage

July 16, 2025

Windows Secure Boot Certificate Expired in June, Microsoft Issues Warning

Microsoft has announced that Secure Boot certificates for Windows devices will begin to expire in June 2026, which may affect device functionality and security. An out-of-band update (KB5064489) was released on July 13, 2025, to address immediate security concerns and prepare systems for the certificate transition. This update includes essential quality improvements and fixes issues related to the startup of certain Azure Virtual Machines when Virtualization-Based Security (VBS) is enabled. The update is cumulative and incorporates previous security fixes. Users are advised to install the update promptly and review guidance for updating their certificates before the expiration deadline.

Winsage

July 15, 2025

Want to keep using Microsoft 365 in Windows 10 after October? You can

Microsoft will end support for Windows 10 on October 14, 2025, meaning no more security patches, bug fixes, or technical support will be available unless users opt for extended security updates. Microsoft encourages all Microsoft 365 users on Windows 10 to upgrade to Windows 11 by this deadline. However, Microsoft will provide security updates for Microsoft 365 applications on Windows 10 until October 10, 2028. Feature updates for individuals and families subscribed to Microsoft 365 will continue until August 2026, while organizations will receive updates until October 13, 2026, or January 12, 2027, depending on their subscription type. After October 14, 2025, support for Windows 10 users will be limited, with representatives encouraging upgrades to Windows 11 for issues specific to that operating system.

Winsage

July 15, 2025

Cyber Agency—50% Of Microsoft Windows PCs ‘Vulnerable To Attack’

Microsoft has decided to extend the life of Windows 10, affecting approximately 700 million users, with around 250 million lacking the necessary hardware for Windows 11. About 50% of users are still on Windows 10, leading to concerns about cybersecurity vulnerabilities. The National Cyber Security Centre (NCSC) has warned that devices not meeting Windows 11 requirements are vulnerable to attacks and highlighted the risks of remaining on Windows 10, referencing the WannaCry ransomware attack as an example. Despite Microsoft's efforts to encourage upgrades, many users are hesitant to change, and the NCSC suggests that the inertia of users may pose the greatest threat to security.

Winsage

July 9, 2025

Microsoft confirms Windows Server Update Services (WSUS) sync is broken

Microsoft has acknowledged a disruption affecting Windows Server Update Services (WSUS), preventing organizations from syncing with Microsoft Update and deploying the latest Windows updates. Reports indicate that synchronization has been compromised since last night, with error messages such as "A connection attempt failed" and ".NET errors indicating that 'The operation has timed out.'" Some administrators noted a brief resumption of synchronization around 12:30 am ET, but it was short-lived. Microsoft attributed the issue to a "problematic update revision in the storage layer," which affects devices trying to sync updates via WSUS. There are currently no workarounds available, and Microsoft is working on a resolution.

Winsage

June 30, 2025

Microsoft warns of Windows update delays due to wrong timestamp

Microsoft has acknowledged a delay in the delivery of the June 2025 Windows security updates due to an incorrect metadata timestamp affecting Windows 10 and Windows 11 systems under quality update deferral policies. The update was released on June 10, 2025, but the timestamp shows June 20, 2025, which may cause devices with deferral settings to receive the update later than expected. Microsoft has provided temporary workarounds for administrators, including creating an expedited deployment policy to bypass deferral settings. The delay only affects the timing of update availability for organizations using these policies and does not impact the quality or applicability of the update. Microsoft will not change the metadata timestamp and has confirmed that the provided workaround is the definitive resolution.

AppWizard

June 30, 2025

NDreams vet Tamsin O’Luanaigh founds new advisory studio Wise Cat

Tamsin O'Luanaigh, co-founder of a VR specialist, has launched an advisory firm called Wise Cat Strategy to improve working environments for game studios and businesses. She has over 20 years of experience as chief people officer at NDreams and received multiple awards for her contributions to workplace culture in the gaming industry. O'Luanaigh emphasizes the need for clear frameworks in people and culture strategies, noting that many employers struggle with implementing meaningful change. Wise Cat Strategy aims to provide tailored solutions to address the unique challenges faced by game studios as they grow.