NewApp Digest
search bot

antivirus solution

Microsoft says Windows 11’s built-in 'Defender' antivirus is "usually sufficient" for most PC users: "I haven't used a 3rd party antivirus since XP"
Tech Optimizer
April 22, 2026

Microsoft says Windows 11’s built-in ‘Defender’ antivirus is “usually sufficient” for most PC users: “I haven’t used a 3rd party antivirus since XP”

The text discusses the importance of antivirus protection in the face of sophisticated cyber threats. It highlights Microsoft Defender as an integrated security solution for Windows 11, which provides real-time protection and advanced features. Recent discussions on the r/Windows11 subreddit indicate a trend of users favoring Microsoft Defender over third-party antivirus software, with many expressing confidence in its adequacy for their security needs.
Do You Need a Third-Party Antivirus for Windows 11? Here's What Microsoft Says
Tech Optimizer
April 21, 2026

Do You Need a Third-Party Antivirus for Windows 11? Here’s What Microsoft Says

Microsoft states that the built-in security features of Windows 11 are adequate for most users, suggesting that third-party antivirus solutions may not be necessary. However, there are scenarios where third-party antivirus software can be beneficial, especially due to recent vulnerabilities in Defender. Independent testing organizations have rated Defender highly, with AV-Test placing it among the top antivirus solutions and AV-Comparatives awarding it the Advanced+ badge. Microsoft emphasizes that Defender runs continuously as part of Windows and receives updates through Windows Update, ensuring automatic protection. The company advises that additional security software may be useful for users managing multiple devices or seeking specific features like identity monitoring or parental controls. Safe computing habits are also recommended to enhance security.
Microsoft officially says you don't need extra antivirus on Windows 11
Tech Optimizer
April 21, 2026

Microsoft officially says you don’t need extra antivirus on Windows 11

Microsoft asserts that Microsoft Defender is sufficient for most Windows 11 users, negating the need for additional antivirus software. Windows 11 is described as "the most secure Windows yet," with Defender providing adequate protection against everyday risks, provided users maintain default settings and keep their systems updated. However, power users, particularly those managing multiple devices or requiring advanced features, may benefit from third-party antivirus solutions. Installing additional antivirus software can lead to increased system resource usage and potential conflicts with Defender, so it is recommended to use only one real-time antivirus solution for optimal performance.
Microsoft quietly reveals whether you need a third-party antivirus software in Windows 11
Tech Optimizer
April 21, 2026

Microsoft quietly reveals whether you need a third-party antivirus software in Windows 11

Microsoft has stated that third-party antivirus software is not necessary for Windows 11, as its built-in antivirus solution, Windows Defender, is sufficient for most users. This assertion was made public on April 9, when Microsoft declared Windows 11 the most secure version of its operating system. Windows Defender is effective when users regularly install Security Intelligence Updates, apply monthly Patch Tuesday updates, and activate SmartScreen for filtering harmful downloads. While third-party antivirus solutions may be beneficial in certain scenarios, such as enterprise environments or for users seeking additional features, Microsoft advises relying on a single real-time antivirus solution, which is typically Windows Defender. Microsoft Defender is a comprehensive protection stack that includes real-time scanning, cloud-delivered protection, and automatic updates. Independent tests have shown that Microsoft Defender achieves high protection rates, comparable to leading paid antivirus solutions. The built-in Windows Security application includes features like SmartScreen, Smart App Control, and ransomware protection, providing extensive coverage without additional costs. The consensus is that most users will not need third-party antivirus software in 2026, as Windows Security offers robust protection against modern threats.
TotalAV Keeps Prices Low While Covering the Basics of Online Protection
Tech Optimizer
April 18, 2026

TotalAV Keeps Prices Low While Covering the Basics of Online Protection

TotalAV, founded in 2016, offers a competitive antivirus solution with an entry-level plan aimed at users seeking essential coverage at a reasonable price. Its features include real-time malware scanning, a browser extension called WebShield for blocking dangerous links, a system cleanup tool, and a basic password vault. The Android app is user-friendly, while the iOS version provides limited features due to Apple's restrictions. TotalAV includes a VPN with a daily data cap and effective phishing protection through its WebShield feature. Renewal costs can increase significantly after the first year, and independent lab testing of TotalAV is less frequent compared to competitors like Bitdefender and Kaspersky.
Avast Antivirus: Free Protection Faces Premium Competition Pressure
Tech Optimizer
April 18, 2026

Avast Antivirus: Free Protection Faces Premium Competition Pressure

Avast Antivirus offers a free version with features like real-time scanning, malware detection, a ransomware shield, and network security, appealing to budget-conscious users on multiple platforms. It has a lightweight design, regular updates, and community-driven threat intelligence. Gen Digital acquired Avast in 2022 and integrated it into its cybersecurity portfolio, focusing on transitioning users from free to premium services and emphasizing AI-driven threat detection. Avast faces competition from free alternatives like Windows Defender and premium solutions such as Bitdefender and Kaspersky, while regulatory scrutiny affects all providers. The demand for antivirus tools is driven by rising ransomware attacks and data breaches, with remote work increasing the need for endpoint protection. Risks for users include performance issues on older devices, false positives, data privacy concerns, and potential subscription traps. Future updates may incorporate more AI features, and partnerships with hardware manufacturers could expand Avast's market reach.
RedSun: Windows 0day when Defender becomes the attacker
Winsage
April 18, 2026

RedSun: Windows 0day when Defender becomes the attacker

A vulnerability has been discovered in Windows Defender that allows standard users to exploit a logic error in the file remediation process, enabling code execution with elevated privileges without administrative access. This flaw, identified by security researcher Chaotic Eclipse, occurs because Windows Defender does not verify if the restoration location of flagged files has been altered through a junction point. The exploit, named RedSun, takes advantage of a missing validation in the MpSvc.dll file, allowing attackers to redirect file restoration to the C:WindowsSystem32 directory. RedSun operates by chaining together four legitimate Windows features: Opportunistic Locks (OPLOCKs), Cloud Files API, Volume Shadow Copy Service (VSS), and Junction Points. The execution of the exploit involves monitoring shadow copies, triggering Defender's detection, synchronizing OPLOCKs, and ultimately writing malicious binaries to the System32 directory. The root cause is the lack of reparse point validation in the restoration process, and currently, no patch or CVE has been assigned for this vulnerability. It affects Windows 10, Windows 11, and Windows Server 2019 and later, and organizations are advised to implement behavioral detection strategies until a fix is available.
'They mopped the floor with me and pulled every childish game they could': Disgruntled researcher releases second major Windows zero-day — claims Microsoft 'would ruin my life, and they did'
Winsage
April 18, 2026

‘They mopped the floor with me and pulled every childish game they could’: Disgruntled researcher releases second major Windows zero-day — claims Microsoft ‘would ruin my life, and they did’

A new zero-day vulnerability in Microsoft Defender has been disclosed by a researcher known as "Chaotic Eclipse," who has created a proof-of-concept exploit called "RedSun." This vulnerability allows local privilege escalation to SYSTEM level on Windows 10, Windows 11, and Windows Server when Microsoft Defender is active. The vulnerability has attracted attention from antivirus vendors, with some detecting it on VirusTotal due to an embedded EIRCAR in the executable. Chaotic Eclipse previously disclosed another vulnerability named BlueHammer, which also allowed local attackers to gain SYSTEM or elevated permissions. The researcher expressed dissatisfaction with Microsoft's vulnerability disclosure process, recounting negative interactions with the company. A Microsoft spokesperson stated the company's commitment to investigating security issues and supporting coordinated vulnerability disclosure.
silver Android smartphone
Winsage
April 18, 2026

‘They mopped the floor with me and pulled every childish game they could’: Disgruntled researcher releases second major Windows zero-day — claims Microsoft ‘would ruin my life, and they did’

A researcher known as “Chaotic Eclipse” has revealed a new zero-day vulnerability in Microsoft Defender, called “RedSun,” which allows local privilege escalation to SYSTEM privileges on Windows 10, Windows 11, and Windows Server when Microsoft Defender is enabled. The exploit has been confirmed to function correctly, and some antivirus vendors have begun detecting it. This follows another vulnerability disclosure by the same researcher, named BlueHammer, which also allows local attackers to elevate permissions. Chaotic Eclipse expressed dissatisfaction with Microsoft’s handling of vulnerability disclosures, claiming they were threatened and experienced frustration with the company’s response. A Microsoft spokesperson stated the company is committed to investigating reported security issues and supports coordinated vulnerability disclosure.
Search