antivirus updates Archives

Tech Optimizer

September 23, 2026

BigDiskBuster PoC Blocks Windows Defender Updates

A new tool named BigDiskBuster has been released on GitHub, which disrupts Microsoft Defender Antivirus by preventing it from installing updates. It does this by consuming available disk space during the update process, causing Defender to remain on its current version and unable to receive new platform or signature updates. BigDiskBuster operates as a local denial-of-service technique and requires prior access to the target machine to execute. The tool was created by researcher Abdelhamid Naceri, known as Nightmare Eclipse, who has previously worked on similar projects. As of now, there is no CVE identifier, patch, or advisory from Microsoft regarding this issue.

Winsage

September 23, 2026

New Windows Defender zero-day blocks Microsoft antivirus updates

Security researcher Abdelhamid Naceri, known as Nightmare Eclipse, released a zero-day exploit called BigDiskBuster that targets Microsoft Defender, preventing antivirus updates and leaving systems vulnerable. BigDiskBuster operates across all supported Windows versions and must run in the background to block updates. Naceri has previously released a similar exploit called UnDefend and has a history of releasing multiple zero-day exploits since April 2026 amid a dispute with Microsoft. Two weeks before BigDiskBuster, he introduced another exploit named ShieldCrash, which grants SYSTEM access and circumvents a patched flaw. Naceri's recent exploits include tools like LegacyHive, BlueHammer, RedSun, YellowKey, GreenPlasma, and MiniPlasma, all targeting Microsoft Defender and other Windows components. Microsoft has warned of potential legal action against malicious activities but has not commented on BigDiskBuster.

Tech Optimizer

September 16, 2026

Chinese state security authorities warn outdated antivirus software can expose systems to cyberattack

Chinese state security officials have emphasized the necessity for organizations to keep antivirus software and virus databases updated to prevent data breaches and unauthorized access. The Ministry of State Security (MSS) highlighted that neglecting these updates has led to significant security incidents, including the theft of sensitive data and cyberattacks on work email accounts. Specific cases include a research institute that suffered a breach due to unpatched vulnerabilities, an institution exposed to cyberattacks for not enforcing regular virus scans, and a company that operated a poorly protected server with outdated antivirus software. Contributing factors to delayed updates include a lack of awareness about cybersecurity risks, insufficient network maintenance, and unclear responsibilities within organizations. Under China's Cybersecurity Law, network operators must implement measures to protect against cybersecurity threats. The MSS advises organizations to enhance their cybersecurity measures by adopting technologies like automated risk alerts and intelligent behavioral analysis.

Tech Optimizer

September 8, 2026

Microsoft Confirms False “Defender Antivirus Turned Off” Alerts Spreading Across Windows Devices

Microsoft has acknowledged a software bug causing persistent Windows Security pop-ups that incorrectly indicate antivirus protection is disabled. These notifications began appearing after the latest Microsoft Defender Antivirus updates, but the antivirus is functioning correctly. The issue affects various versions of Windows and Windows Server with the latest Defender updates. Microsoft has committed to resolving the issue in a future update, though no timeline has been provided. Users are advised to verify the status of their antivirus through the Windows Security app and disregard the notifications until a fix is released.

Tech Optimizer

September 4, 2026

Microsoft Confirms False “Defender Antivirus Turned Off” Alerts Spreading Across Windows Devices

Microsoft has acknowledged a software bug in its Windows operating system that causes misleading pop-up notifications, indicating that antivirus protection is disabled. These alerts began appearing after the latest Microsoft Defender Antivirus updates, despite the antivirus functioning correctly. The notifications can occur at startup and intermittently, and cannot be silenced through standard notification controls. The issue affects various versions of Windows and Windows Server with the latest Defender updates. Microsoft is working on a resolution, but no timeline has been provided. Users are advised to verify their antivirus status through the Windows Security app and can ignore the notifications if real-time protection is confirmed as active.

Tech Optimizer

July 27, 2026

What to look for in antivirus software without the jargon

Shopping for antivirus software can be overwhelming due to technical jargon and extensive feature lists. Key considerations for effective antivirus software include: - Real-time protection: The software should continuously monitor activities and provide automatic protection against threats. - Malware and ransomware blocking: It should defend against various online threats, including malware, spyware, and ransomware. - Firewall protection: A firewall should monitor and block suspicious connections to enhance security. - Performance: The software should operate quietly in the background without interrupting daily tasks. - Frequent updates: Regular updates are essential to combat evolving online threats. - Scam protection: The software should flag suspicious links and messages to prevent cyberattacks before they reach the device. When choosing antivirus software, prioritize these features to ensure effective protection without complicating your life.

Tech Optimizer

February 11, 2026

eScan Antivirus Update Servers Compromised to Deliver Multi-Stage Malware

MicroWorld Technologies confirmed a breach of its eScan antivirus update infrastructure, allowing attackers to deliver a malicious downloader to enterprise and consumer systems. Unauthorized access was detected, leading to the isolation of affected update servers for over eight hours. A patch was released to revert the changes made by the malicious update, and impacted organizations were advised to contact MicroWorld for assistance. The attack occurred on January 20, 2026, when a compromised update was distributed within a two-hour window. The malicious payload, introduced through a rogue "Reload.exe" file, hindered eScan's functionality, blocked updates, and contacted an external server for additional payloads. This rogue executable was signed with a fake digital signature and employed techniques to evade detection. It also included an AMSI bypass capability and assessed whether to deliver further payloads based on the presence of security solutions. The malicious "CONSCTLX.exe" altered the last update time of eScan to create a false sense of normalcy. The attack primarily targeted machines in India, Bangladesh, Sri Lanka, and the Philippines, highlighting the rarity and seriousness of supply chain attacks through antivirus products.

Winsage

September 15, 2025

How to use Windows 10 ESU to keep getting updates after October 2025

The end of support for Windows 10 is on October 14, 2025, after which Microsoft will cease updates, security patches, and technical support. Users can enroll in the Extended Security Updates (ESU) program to receive critical security updates until October 13, 2026. The ESU program is available to everyday consumers and offers three enrollment options: free (for backing up files to OneDrive), Microsoft Rewards (redeeming points), and paid. Users can register up to ten computers linked to the same Microsoft account, provided they are running Windows 10 version 22H2 and are fully updated. Enrollment steps include checking for updates in Settings, selecting an enrollment option, and following on-screen instructions. Microsoft Defender Antivirus updates will continue until 2028, while Microsoft 365 applications will receive updates without new features after Windows 10 support ends. The option to enroll may roll out gradually, and upgrading to Windows 11 is recommended for ongoing support and updates.

Tech Optimizer

June 28, 2024

Tech security check: Am I doing enough to keep my computer safe?

- Regularly update antivirus software to protect against latest threats - Scan computer for malware regularly - Update operating system and applications to reduce vulnerabilities - Remove unnecessary applications to enhance security - Use a high quality VPN to encrypt internet connection and conceal IP address

Tech Optimizer

June 22, 2024

U.S. Bans Russia’s Kaspersky Antivirus Software – The Moscow Times

The US has banned Kaspersky antivirus products over national security concerns due to the Russian Government's offensive cyber capabilities and influence over the company.