enhanced security Archives

Winsage

August 10, 2026

Windows 11 is pulling picture passwords and pushing people to PINs, passwords, and biometrics

Microsoft has removed the option to set up a new picture password for Windows 11 users as part of the July 2026 security update. Users with an existing picture password can continue to use it, but once removed or disabled, it cannot be re-established. Microsoft recommends using Windows Hello PIN, facial recognition, or fingerprint recognition instead.

Winsage

August 9, 2026

Windows 11’s built-in Weather app wastes more than 1 GB of RAM

Windows Latest and Wccftech reported significant updates in the Windows ecosystem aimed at enhancing user experience. Key features include enhanced security protocols to protect against threats, an improved user interface for smoother navigation, and performance optimizations for faster load times and better responsiveness. The community response has been positive, with users eager to explore the benefits of these updates.

Winsage

August 8, 2026

Windows 11 26H2 is a small update with big quality-of-life improvements, expected around October 2026

Windows 11 will undergo a significant transformation with the upcoming annual update, version 26H2, which introduces enhancements to the interface, search functionality, backup processes, and AI integration. The update will allow users to reposition the taskbar to any edge of the screen and adopt a smaller layout with reduced icon sizes. The Start menu will have new configuration options and a privacy feature for hiding account details during screen sharing. Search functionality will prioritize local content over web results, with an option to disable web results entirely. Cloud-assisted setup and recovery will become a default setting for eligible Microsoft Entra devices, automatically saving configuration settings and app lists. Copilot will be more integrated into daily operations, including a dockable side panel in File Explorer. Updates will also be made to traditional system tools, including a modernized Run dialog and enhanced security for administrator-level operations. The support timeline for Windows 11 installations will reset, with Home and Pro editions receiving 24 months of support and Enterprise and Education editions receiving 36 months. The hardware requirements remain unchanged, and the rollout of 26H2 is anticipated in the latter half of 2026, likely around October.

Winsage

August 7, 2026

Moving the Microsoft Edge extensions ecosystem forward with Manifest Version 3

In 2020, Microsoft committed to Manifest Version 3 (MV3) for the Chromium extensions platform. As of now, 95% of the top MV2 extensions have transitioned to MV3 in the Edge Add-ons store. Starting in August 2026, Microsoft Edge will begin transitioning consumers away from MV2 extensions, aiming to complete this by the end of 2026, with enterprise deprecation expected in early 2027. Currently, only 58 MV2-based extensions show meaningful usage, and three of these lack an MV3 version. Notifications will be sent to users and developers regarding the transition, and MV2 extensions will gradually be disabled by default. Developers are encouraged to finalize their transition to MV3 and submit updates via Microsoft Partner Center.

Winsage

August 1, 2026

Not sure whether to use Windows Hello or Enhanced Sign‑in Security? This breakdown makes the choice easy

Microsoft will introduce Enhanced Sign-in Security (ESS) in the August 2026 update for Windows 11, allowing support for compatible external fingerprint readers. ESS aims to enhance the security of the authentication process rather than improve the accuracy of biometric recognition. Unlike standard Windows Hello, which processes biometric authentication through the operating system, ESS utilizes Virtualization-Based Security (VBS) and Trusted Platform Module (TPM) 2.0 to isolate sensitive operations in a protected environment. ESS-compatible fingerprint readers have dedicated secure processors, store templates internally, and communicate with the operating system via encrypted channels. Users can enable ESS by navigating to Settings > Accounts > Sign-in options on their devices. If a device does not support ESS, standard Windows Hello remains a robust authentication option.

Winsage

August 1, 2026

Windows Hello vs. Enhanced Sign‑in Security: Which sign‑in method actually keeps your Windows 11 PC safer, and what’s the difference?

Microsoft will introduce Enhanced Sign-in Security (ESS) in the August 2026 update for Windows 11, which will support compatible external fingerprint readers. ESS aims to strengthen the authentication process against potential attacks by shifting processing to isolated, hardware-protected environments using Virtualization-Based Security (VBS) and TPM 2.0 technology. Unlike standard Windows Hello, which processes biometric authentication through the operating system, ESS-compatible devices perform more processing within the hardware itself, ensuring that only authentication results are sent to the OS. To enable ESS, users must navigate to Settings > Accounts > Sign-in options and follow prompts to set up their fingerprint recognition. Existing non-ESS biometric enrollments will be removed during the upgrade to ensure security.

Winsage

July 29, 2026

Microsoft reportedly using TPM chips to weed out Windows piracy

Microsoft's Trusted Platform Module (TPM) 2.0 has been integral to Windows 11's security since its launch in 2021. TPM is now standard in most CPUs, allowing Microsoft to enhance device activation security. The current Key Management Service (KMS) model has vulnerabilities that hackers exploit, prompting the need for stronger device identity and activation integrity assurances. TPM provides a hardware-level security mechanism for the activation process, where KMS hosts must present TPM credentials to validate their hardware identity and confirm they are uncompromised. Starting with upcoming Windows Server releases, KMS hosts will be required to prove they run on verified hardware before activating clients. By August 2026, Windows Server 2025 will help administrators prepare for these changes.

Tech Optimizer

July 28, 2026

ClamAV Setup: Linux Antivirus in 12 Steps [2026]

Malware can threaten Linux systems, which are often mistakenly believed to be immune to viruses. It can be introduced through email attachments, infected files, or compromised plugins, especially when Linux servers interact with Windows clients or handle internet uploads. ClamAV is an open-source antivirus engine maintained by Cisco Talos, designed for scanning mail traffic and file uploads. As of mid-2026, the stable release is ClamAV 1.5.x, with version 1.5.2 being the latest patch. To deploy ClamAV, users need root or sudo access on a compatible Linux machine, at least 2 vCPUs and 2GB of RAM, 5GB of free disk space, and outbound HTTPS access to ClamAV’s signature mirrors. The installation process involves several steps, including configuring freshclam for automatic updates, validating detection with the EICAR test file, and setting up cron jobs for regular scans. ClamAV can also be integrated with mail servers and a SIEM for enhanced security. Common pitfalls in deployment include skipping the initial freshclam run and using clamscan instead of clamdscan for repeated scans. ClamAV is free for commercial use and can also scan Windows systems, although it does not replace comprehensive endpoint protection solutions.

Winsage

July 28, 2026

Windows 11: Microsoft’s new TPM rule does not affect your PC

Microsoft has introduced a series of enhancements to its Windows operating system, focusing on user experience and security. Key features include: - Enhanced Security Protocols: Improved encryption and multi-factor authentication options to protect user data. - Streamlined User Interface: A refined interface for better accessibility and customization. - Performance Optimizations: Faster boot times and more efficient resource management. Industry experts have reacted positively, highlighting Microsoft's proactive approach to user concerns and its emphasis on security and user experience. These updates are expected to support operational efficiency and safeguard sensitive information for businesses.

Winsage

July 27, 2026

You heard wrong, Microsoft isn’t ending pirated Windows 11 with TPM, and the new rule only affects enterprise KMS servers

On July 22, Microsoft announced the KMS Hardware-Secured requirement, linking Windows volume activation servers to a TPM chip. This initiative is aimed at organizations using Key Management Service (KMS) servers to enhance security by ensuring that KMS hosts verify their identity and integrity through the TPM before activating Windows machines. The motivation behind this requirement is to prevent unauthorized activation methods that exploit fake KMS servers. Organizations are advised to ensure their KMS hosts are certified and that TPM is enabled. The KMS Hardware-Secured measures do not target individual users with pirated copies of Windows, as most current piracy methods do not involve KMS servers. Microsoft has not pursued legal action against minor piracy instances, focusing instead on maintaining user engagement through subscriptions and services.