authentication issues Archives

Winsage

September 25, 2026

Sorry Microsoft. Windows 10 is more stable than Windows 11, and your recent updates have made it obvious

Windows 11's September update, released on the 8th, has caused various issues, including problems with Remote Desktop, USB audio, and Linux/WSL applications. Failures in File History, crashes of Explorer.exe, and instability with AMD GPUs were also reported. An emergency update was issued on September 14 but did not resolve all issues. Over nine months, Windows 11 updates have resulted in numerous bugs, while Windows 10 has experienced significantly fewer issues. Specific problems with Windows 11 included black screens and authentication issues in January, Microsoft account sign-in issues in March, BitLocker recovery problems in April and May, boot failures in June, and compatibility problems in July. August saw game crashes linked to third-party drivers, and September was marked by extensive issues requiring an emergency update. Windows 10 continues to receive updates and has a commitment to Extended Security Updates until October 12, 2027. The stability of Windows 10 is attributed to fewer significant changes compared to the ongoing enhancements in Windows 11.

Winsage

September 18, 2026

Windows 11 Update Can Break Active Directory Trust Relationships

A recent security update from Microsoft, KB5124008, has caused disruptions for organizations using on-premises Active Directory, particularly affecting domain-joined Windows 11 devices with Credential Guard. After installing this update, some devices lost their secure trust relationship with the domain, preventing users from logging in with valid credentials. The issue is linked to Machine Identity Isolation, a security feature that enhances machine account credential protection but requires domain controllers to operate at the Windows Server 2025 Domain Functional Level. Organizations that enabled this feature without meeting the prerequisite may experience trust relationship failures. Microsoft has suggested a workaround to disable Machine Identity Isolation and plans to suspend its enforcement in an upcoming update while improvements are made.

AppWizard

July 19, 2026

Is Minecraft down? Thousands report issues with ‘authentication server’ amid widespread outages

On Saturday afternoon, a disruption affected thousands of Minecraft users, with reports indicating that nearly 3,000 users in the United States experienced issues logging in due to authentication servers being down. The outage began around 10:37 AM EDT, with over 2,100 users reporting problems by 11:07 AM EDT, and the number of reports increasing to 3,318 by 11:37 AM EDT. Players have expressed frustration as they are unable to access the game, and they are awaiting updates from Mojang Studios regarding the resolution of the issues.

Tech Optimizer

June 22, 2026

pgAdmin 4 Released With Fixes for Seven Security Vulnerabilities and New Features

pgAdmin 4 version 9.16 has been released, featuring 64 bug fixes and addressing seven security vulnerabilities (CVE-2026-12044 to CVE-2026-12050). Key vulnerabilities include SQL injection flaws and cross-site scripting issues. CVE-2026-12044 involved SQL injection risks in dialog templates, while CVE-2026-12045 allowed attackers to bypass read-only transaction restrictions in the AI Assistant feature. Authentication issues were fixed in CVE-2026-12046, and client-side vulnerabilities were addressed in CVE-2026-12048 and CVE-2026-12047. Additional vulnerabilities included an open redirect in multi-factor authentication (CVE-2026-12049) and another SQL injection flaw in restore point functionality (CVE-2026-12050). Usability improvements include colorized panel headers, middle-click tab closing, and enhancements to OAuth2 login. The release supports new PostgreSQL storage parameters and includes dependency upgrades. Stricter access controls have been enforced, and pgAgent has been marked for removal. The update is available for download on multiple platforms.

Winsage

June 16, 2026

Munch Museum Windows display gives visitors something to scream about

At the Munch Museum in Oslo, Edvard Munch's painting "The Scream" is displayed alongside a Microsoft account recovery screen, creating an ironic contrast between art and technology. The museum rotates three versions of "The Scream" to prevent deterioration, and the painting continues to resonate with modern audiences as it symbolizes anxiety in today's technology-driven world. The frustrations of dealing with digital barriers, such as forgotten passwords, evoke emotions similar to those depicted in "The Scream."

Tech Optimizer

May 20, 2026

Critical PostgreSQL Flaws Enable Code Execution and SQL Injection

On May 14, 2026, PostgreSQL released critical security updates for versions 18.4, 17.10, 16.14, 15.18, and 14.23, addressing 11 Common Vulnerabilities and Exposures (CVEs) related to stack buffer overflows, SQL injection, memory disclosure, and denial-of-service vulnerabilities. The most critical vulnerability, CVE-2026-6637, has a CVSS score of 8.8 and allows remote, unprivileged database users to execute arbitrary code. Other notable vulnerabilities include CVE-2026-6473, which affects memory allocation leading to potential memory corruption, and CVE-2026-6475, which allows overwriting sensitive OS-level files. Additional vulnerabilities include SQL injection flaws and authentication issues, with various CVSS scores ranging from 3.7 to 7.5. The updates can be implemented without a database dump, and PostgreSQL 14 will reach its end-of-life on November 12, 2026.

AppWizard

May 6, 2026

Gmail app bug locks some Microsoft 365 and Exchange Online users out on Android, Outlook still works

Android users are experiencing authentication issues with the Gmail app when trying to access Microsoft 365 or Exchange Online accounts, preventing access to work emails on mobile devices. This issue affects users across various devices, including Pixel, Samsung, Sony, OnePlus, Xiaomi, and Motorola, with reports from over 500 end users across 50 companies. The error message displayed is: “Check your account info or switch to modern authentication below. If you need help, contact your IT admin.” Attempts to delete and re-add accounts often worsen the situation. The problem may be linked to Microsoft enforcing Exchange ActiveSync (EAS) protocols, specifically a change implemented on March 1, 2026, requiring EAS version 16.1, which Gmail cannot meet. Outlook remains unaffected due to its use of a different sync protocol. Users have attempted various temporary solutions, such as clearing app cache and wiping app data, but these have proven unreliable. The most stable workaround currently recommended is to switch to the Outlook app for Android. Neither Google nor Microsoft has publicly addressed the authentication issues.

Winsage

April 20, 2026

Emergency Update for Windows Server Following Reboot Issues

Microsoft has released emergency updates for various versions of Windows Server due to issues arising from the April 2026 Patch Tuesday security updates. A significant problem was a reboot loop affecting domain controllers caused by crashes of the Local Security Authority Subsystem Service (LSASS), which disrupted authentication services. This issue was especially problematic during the setup of new domain controllers. Additionally, some Windows Server 2025 systems encountered difficulties in installing the security update KB5082063. The out-of-band update (KB5091157) for Windows Server 2025 addresses both the installation failure and the domain controller restart issue. Other updates targeting the domain controller restart problem were released for additional supported Windows Server versions. Microsoft has introduced an out-of-band update for seven versions, including KB5091157 for Windows Server 2025 and KB5091571 for Windows Server, version 23H2. Furthermore, some Windows Server 2025 devices may boot into BitLocker recovery mode after the update, requiring users to enter a BitLocker recovery key.

Winsage

April 17, 2026

Microsoft’s April patch puts Windows domain controllers into reboot loops — third known issue from KB5082063 is affecting Windows Server 2016 through 2025

Microsoft has acknowledged that the April 2026 security update for Windows Server, patch KB5082063, has caused significant disruptions for some enterprise domain controllers, leading to continuous reboot cycles in non-Global Catalog domain controllers used in Privileged Access Management (PAM) deployments. This has resulted in the unavailability of Active Directory authentication and directory services on affected servers. Additionally, the installation of KB5082063 may fail on some Windows Server 2025 systems. This issue marks the third consecutive year that April security updates have caused problems for Windows Server domain controllers. In previous years, Microsoft issued emergency fixes for similar issues, including crashes and complications with NTLM authentication. Administrators currently have limited options, including delaying the update, isolating a test domain controller, or engaging with Microsoft Support for tailored mitigation steps.

Winsage

March 30, 2026

Microsoft’s March Security Update of High-Risk Vulnerability Notice for Multiple Products

On March 11, NSFOCUS CERT reported the release of Microsoft’s March Security Update, addressing 83 security vulnerabilities in products like Windows, Microsoft Office, Microsoft SQL Server, and Azure. The update includes eight critical vulnerabilities and 75 important ones, with risks such as privilege escalation and remote code execution. Key vulnerabilities include: - CVE-2026-26110: Microsoft Office Remote Code Execution Vulnerability (CVSS score: 8.4) - CVE-2026-26113: Microsoft Office Remote Code Execution Vulnerability (CVSS score: 8.4) - CVE-2026-26144: Microsoft Excel Information Disclosure Vulnerability (CVSS score: 7.5) - CVE-2026-23669: Windows Print Spooler Remote Code Execution Vulnerability (CVSS score: 8.8) - CVE-2026-24294: Windows SMB Server Privilege Escalation Vulnerability (CVSS score: 7.8) - CVE-2026-23668: Windows Graphics Component Privilege Escalation Vulnerability (CVSS score: 7.0) Affected product versions include various editions of Microsoft Office, Windows Server 2012 R2, Windows Server 2016, Windows 10, and Windows 11. Microsoft has released security patches for these vulnerabilities, and users are encouraged to install them promptly.