disable Archives

Winsage

September 26, 2026

Windows finally let me rip Bing out of my desktop. The speed boost is undeniable

Windows 11 users previously experienced a dual-search environment where local and web results were mixed, often leading to cluttered searches. Many resorted to registry edits to disable web results, but these workarounds were not fully effective. The search interface was complicated by irrelevant web links, making it difficult to find local files. With the introduction of version 26H2, Microsoft added a toggle in Settings that allows users to manage web searches independently, improving the search experience by prioritizing local files. This feature began rolling out after the September 2026 Patch Tuesday update. Disabling web results streamlines the search panel but removes the Copilot entry and may not be immediately available to all users.

Winsage

September 26, 2026

Microsoft: Recent Windows updates cause desktop loading issues

Microsoft has acknowledged that some users may experience desktop loading issues, specifically black screens, after installing the August 2026 preview updates and subsequent releases. This problem mainly affects Azure Virtual Desktop (AVD) hosts using FSLogix. Symptoms include a black screen post-sign-in and crashes related to Windows Explorer, which can be temporarily resolved by manually launching Windows Explorer through Task Manager. For enterprise customers, Microsoft has introduced a mitigation strategy via Known Issue Rollback (KIR), allowing IT administrators to reverse problematic updates by applying specific group policies. Additionally, Microsoft has addressed issues related to the loss of mouse and desktop settings on certain Windows 11 systems caused by the KB5120998 update.

Winsage

September 25, 2026

Windows update leaves some virtual desktops staring into the void

Microsoft has acknowledged an issue affecting some Windows 11 users utilizing virtual desktops, where a black screen appears after sign-in, requiring manual launch of Explorer to regain access. This glitch is linked to devices operating on the August 2026 non-security preview update or later. It has been predominantly observed on Azure Virtual Desktop (AVD) hosts using FSLogix, with crashes of Windows Explorer noted in the Application event log. A temporary workaround involves using Task Manager to initiate explorer.exe as a new task. Microsoft has implemented a Known Issue Rollback (KIR) via Group Policy to disable the problematic change until a permanent fix is released. Versions 26H1, 25H2, and 24H2 of Windows 11 are affected, while Windows 10 and Windows Server do not appear to be impacted.

AppWizard

September 25, 2026

Call of Duty ‘cosmetic toggle’ will cleanse Warzone of its Party City aesthetic

Warzone has introduced a "cosmetic toggle" that allows players to disable legacy character skins at a client level, specifically for Warzone, while Modern Warfare 4 will not carry over any cosmetics from previous titles. This feature aims to address concerns about mismatched crossover skins and create a more cohesive gaming experience. The toggle is a response to previous commitments to avoid old skins, although collaborations have complicated this effort. Its effectiveness may diminish with the introduction of new characters in future seasons, and its future depends on Infinity Ward's commitment to aesthetic integrity and potential expansions of the toggle.

AppWizard

September 24, 2026

Russia’s state-backed messaging app Max can secretly change how it surveils individual users, researchers at InterSecLab find

The Max messenger, developed by VK, has significant user tracking capabilities. A report from InterSecLab revealed that: - Max's features can vary for individual users without app updates. - It lacks end-to-end encryption, allowing VK access to messages, even in "secret chats." - Each account can be configured to perform specific actions, such as decrypting messages on VK's servers and blocking messages if a VPN is detected. - Upon launching, Max reports the user’s network environment to VK, including their public IP address and mobile carrier. - The app uploads users’ entire address books unencrypted to VK's servers, accessing contacts of non-registered individuals. - A phone number query can reveal extensive user information without notification. - Max stops functioning if it detects a VPN, requiring users to disable it to send messages, although workarounds exist. - New users receive a curated list of recommended channels, primarily featuring state media and pro-government figures.

Winsage

September 24, 2026

Microsoft Ships September Preview Updates for Windows 11

Microsoft has released preview updates for Windows 11 versions 24H2, 25H2, and 26H1 as part of its Week D schedule. Users of versions 24H2 and 25H2 can install the preview cumulative update KB5124010, updating their systems to builds 26100.9550 and 26200.9550, respectively. Enhancements include refinements to File Explorer, support for Emoji 17.0, a new Tips widget, improved desktop backgrounds, enhanced Bluetooth functionality, upgrades to the Settings app, additional touchpad gesture controls, new key remapping options in Copilot, and Wi-Fi support in the Windows Recovery Environment. The final monthly update for Windows 11 version 24H2 will be shipped next month, with the version set to reach the end of its support lifecycle on October 13, 2026. Users of version 26H1 can install the preview cumulative update KB5124006 to upgrade to build 28000.3086. This update includes a resizable Taskbar, customizable Start menu, revamped Windows Search, improvements to File Explorer, enhanced progress indicators, and better app update support.

AppWizard

September 24, 2026

6 ways Android Enterprise is evolving for the modern workforce

In modern workplaces, the balance between innovation and security is crucial as employees seek access to advanced technology while IT departments protect sensitive data. Android is enhancing its tools for workers through Android Enterprise, with key advancements expected by 2026, including: 1. Advanced AI agents and controls: - Smarter workflows will introduce next-generation AI agents with enterprise-grade controls. - The evolution of Gemini will enable management of complex workflows using real-time context, eliminating manual app switching. - Built-in safeguards will ensure work profile isolation, preventing personal agents from accessing corporate data. - Administrators will have granular control to configure or disable AI automation through Android Enterprise. 2. Next-gen manageable XR devices: - New hardware like the XREAL Aura wired glasses will enhance workforce capabilities. - IT administrators will manage a range of XR devices alongside standard mobile fleets using Enterprise Mobility Management consoles. - Employees will benefit from hands-free productivity with integrated displays, audio, and AI assistance while connected to enterprise tools.

Tech Optimizer

September 23, 2026

BigDiskBuster PoC Blocks Windows Defender Updates

A new tool named BigDiskBuster has been released on GitHub, which disrupts Microsoft Defender Antivirus by preventing it from installing updates. It does this by consuming available disk space during the update process, causing Defender to remain on its current version and unable to receive new platform or signature updates. BigDiskBuster operates as a local denial-of-service technique and requires prior access to the target machine to execute. The tool was created by researcher Abdelhamid Naceri, known as Nightmare Eclipse, who has previously worked on similar projects. As of now, there is no CVE identifier, patch, or advisory from Microsoft regarding this issue.

Winsage

September 23, 2026

PAYLOAD ransomware hijacks Windows Group Policy in encryption-less attacks

A sophisticated PAYLOAD ransomware attack targeted an unnamed manufacturing organization in the Middle East, exploiting vulnerabilities in Microsoft Active Directory Group Policy. The attackers accessed the network through a compromised domain account via FortiGate SSL VPN on April 11, escalated privileges to domain administrator by April 13, and created a malicious Group Policy Object (GPO) named "PAYLOAD." This GPO was linked at the root of the domain, allowing it to affect nearly all domain-joined Windows workstations. The attackers distributed ransom notes, altered desktop images, displayed ransom messages at login, and disabled local administrator accounts. A second GPO, "win Firewall Off," was deployed to disable Windows Firewall across all profiles. The malicious policies activated on April 14 after systems were rebooted, causing widespread disruption. The attackers also exfiltrated data from file servers and published it on the dark web, while Kaspersky found no evidence of Windows file encryption or active malware processes. Recommendations for organizations include monitoring GPO creation, checking for unexpected changes, implementing multi-factor authentication for VPN access, and protecting privileged accounts.

Winsage

September 22, 2026

PAYLOAD ransomware hijacks Windows Group Policy in encryption-less attacks

A sophisticated PAYLOAD ransomware attack targeted a manufacturing organization in the Middle East, exploiting vulnerabilities in Microsoft Active Directory Group Policy. The attackers gained initial access on April 11 by compromising a domain account through the company's FortiGate SSL VPN. By April 13, they escalated privileges to a domain administrator and created a malicious Group Policy Object (GPO) named “PAYLOAD,” which was linked at the root of the domain. This GPO allowed them to distribute a ransom note, change desktop images, display a ransom message during login, and disable the local administrator account. A secondary GPO, “win Firewall Off,” was used to disable Windows Firewall across all profiles. The malicious changes activated on April 14 after system reboots, causing widespread disruption. The attackers also exfiltrated sensitive data, which was later released on the dark web. Kaspersky's investigation found no evidence of file encryption or active malware processes, indicating the attack was contained within Active Directory. Recommendations for organizations include monitoring GPO modifications, implementing multi-factor authentication for VPN access, and safeguarding privileged accounts.