driver security Archives

Winsage

April 13, 2026

Microsoft tightens Windows 11 driver security rules

Microsoft will enforce a new mandate requiring all hardware drivers to comply with the Windows Hardware Compatibility Program (WHCP) standards starting April 1, 2026. This change will eliminate the "cross-signing" system that allowed older drivers with expired certificates to remain trusted. The enforcement of WHCP certification will apply to various versions of Windows 11 and Windows Server 2025. Users may face blocks when installing older drivers on new systems, but existing installations will not be immediately disrupted. Microsoft plans to introduce an "allow list" for vetted legacy drivers to ensure essential equipment remains operational during the transition. The initial rollout will occur in "evaluation mode," allowing Microsoft to monitor driver behavior without blocking software. For corporate environments, Microsoft offers "Application Control for Business" to allow specific software while maintaining security measures.

Winsage

April 7, 2026

Windows 11 is phasing out old kernel drivers: Microsoft will permanently end cross-signing in April

On March 26, 2026, Microsoft announced that starting with the April security update, it will eliminate trust in kernel drivers from the previous Cross-Signed Program for Windows 11 versions 24H2, 25H2, 26H1, and Windows Server 2025. Only drivers that have passed the Windows Hardware Compatibility Program (WHCP) or are on Microsoft's allow list will be allowed to load by default. This change aims to enhance security by establishing a robust chain of trust and addressing vulnerabilities associated with old kernel drivers. Users of older hardware that rely on specialized drivers may face challenges, as drivers not WHCP-signed or explicitly allowed will be excluded from the trusted zone.

Winsage

February 19, 2025

Still using Windows 95? This app will no longer work for you

AIDA64 has released version 7.60, which no longer supports Windows 95, Windows 98, and Windows ME. The update maintains compatibility with Windows 2000 and later versions. New features include support for AMD Radeon RX 9070 and RX 9070 XT graphics cards, new dark themes, support for Asus ROG Ryujin III Series LCDs, integration of Turing LCD support, enhanced compatibility with B840, B850, and B860 chipset motherboards, support for Corsair HX1200i 2023 PSU sensors, improvements in kernel driver security, better support for Intel Arrow Lake-H and Arrow Lake-U processors, and detailed GPU information for Nvidia GeForce RTX 5000 Series.

Winsage

February 18, 2025

Still using Windows 95? This app will no longer work for you

FinalWire Ltd. has released AIDA64 v7.60, which introduces new features and improvements while discontinuing support for Windows 95, Windows 98, and Windows ME. The application remains compatible with Windows 2000 and later versions. New features include support for AMD Radeon 9070 and 9070 XT GPU cards, new dark themes, support for Asus ROG Ryujin III Series LCDs, integration with Turing LCDs, enhanced compatibility with B840, B850, and B860 chipset motherboards, support for Corsair HX1200i 2023 PSU sensors, improvements in kernel driver security, better support for Intel Arrow Lake-H and Arrow Lake-U processors, and detailed GPU information for AMD Radeon RX 9070 and RX 9070 XT, as well as Nvidia GeForce RTX 5000 Series cards.

Winsage

August 13, 2024

The ultimate BSOD — this Windows driver security flaw could crash your whole system, and Microsoft is still yet to fix it

Cybersecurity experts have identified a vulnerability in the Windows operating system related to an improper input data validation flaw in the Common Log File System (CLFS.sys) driver. This vulnerability, designated as CVE-2024-6768, affects both Windows 10 and Windows 11 across all versions and can lead to a Blue Screen of Death (BSOD) when a specific log file format, such as a .BLF file, is created. The flaw has a medium severity score of 6.8 and can be exploited with minimal privileges and no user interaction, making it accessible to less experienced attackers. Currently, there is no evidence of exploitation in the wild, but a Proof-of-Concept (PoC) has been released, increasing the risk of potential attacks. Microsoft has attempted to reproduce the issue but has been unsuccessful, leaving the vulnerability unaddressed in the latest versions of Windows.

Winsage

July 23, 2024

Windows 10 KB5040525 fixes WDAC issues causing app failures, memory leak

- Windows 10 KB5040525 is an optional release that includes additional fixes and improvements for Windows 10 22H2, updating it to build 19045.4717. - The update addresses issues with the Print Support App not responding and not printing when used with a USB device, as well as Universal Print clients failing to communicate with the Universal Print service when Web Proxy Auto Discovery (WPAD) is turned on. - The update also adds drivers to the Windows Kernel Vulnerable Driver Blocklist file to protect against Bring Your Own Vulnerable Driver (BYOVD) attacks. - Users of Windows 10 versions 2004, 20H2, 21H1, or 21H2 can upgrade to Windows 10 22H2 using an enablement package.