firmware Archives

Winsage

July 29, 2026

Windows BitLocker is fine. I still don’t trust it with everything

BitLocker is an encryption tool in Windows that secures data using a system of keys, with some keys stored in the motherboard's Trusted Platform Module (TPM) and others on the storage drive. Users must save a recovery key to prevent data loss, which can be stored on a removable disk, printed, or uploaded to the cloud. For Home license users, the recovery key usually defaults to cloud storage. Recently, vulnerabilities in BitLocker, including the "YellowKey" flaw, have been discovered, allowing individuals with physical access to bypass encryption. A second vulnerability was identified in June, also exploiting physical access to circumvent BitLocker's security.

Winsage

July 29, 2026

Microsoft Intune Adds macOS Compliance and Samsung Update Controls

Microsoft's July Intune update includes enhancements for IT administrators, such as real-time monitoring of Windows device sync progress, custom compliance settings for macOS, and improved firmware update management for Samsung devices. The Intune admin center now allows real-time monitoring of sync progress for Windows devices, enabling simultaneous updates across various management aspects. Custom compliance settings for macOS enable organizations to define specific compliance requirements beyond Apple's standard checks, allowing for a unified compliance management experience across Windows, Linux, and macOS. The update also enhances Samsung Galaxy firmware management through Samsung Knox E-FOTA, allowing administrators to control firmware version deployment and update schedules. Additionally, the update clarifies that newer Windows Autopilot methods allow provisioning of Windows 11 devices without prior registration.

Winsage

July 29, 2026

Missed Windows 11 Secure Boot? Don’t panic, Microsoft is still pushing it in the coming months

Microsoft reassured Windows 11 and Windows 10 users that their PCs will continue to boot normally and receive updates even if they have not yet received the new Secure Boot 2023 certificates. The rollout of these certificates is expected to continue over the upcoming months. The initial Secure Boot certificate expired on June 24, 2026, and Microsoft has been replacing older 2011 certificates since 2024. The latest update, KB5101650, transitioned Windows 11 to OS builds 26200.8875 and 26100.8875 for versions 25H2 and 24H2, respectively. The 2023 certificates replace older certificates with modern cryptographic standards, allowing Microsoft to deliver DBX revocation updates without interruption. Devices using the 2011 KEK can only receive DBX updates signed with that key, which is no longer valid after June 24. Microsoft has been rolling out the 2023 certificates for the past two years, and many devices remained in a yellow or red status by the June deadline. To check Secure Boot status, users can navigate to Windows Security > Device Security. A green checkmark indicates successful application of the certificates, while yellow and red alerts indicate compatibility issues or firmware incompatibility. PCs that are older or operating in Legacy BIOS mode will not receive the updates. Windows 10 also receives Secure Boot updates, but enrollment in Extended Security Updates (ESU) is required.

AppWizard

July 29, 2026

Your older Galaxy phone just lost another piece of Samsung support

Samsung has announced that the Samsung Find app will no longer receive updates on devices running One UI 2.0 (Android 10) or earlier. Users of these devices will miss out on new features, bug fixes, and performance enhancements, though existing functionalities will remain operational. Users can reinstall the latest compatible version of the app from the Galaxy Store or Google Play. Samsung advises upgrading to a newer version of One UI for continued access to updates and long-term support. The decision reflects a broader trend of phasing out support for older software versions in favor of newer iterations.

AppWizard

July 28, 2026

First look: Per-app zoom controls on Samsung’s Galaxy Z Fold 8

Samsung has launched the Galaxy Z Fold 8, Z Fold 8 Ultra, and Z Flip 8, with pre-orders underway. A new feature in One UI 9 stable allows individual zoom controls for apps, enhancing user experience. This capability, initially found in the firmware of the Z Fold 8 Ultra, is now available as a Labs option on the standard Z Fold 8, accessible through Settings -> Advanced features -> Labs. Users can choose from five different zoom levels for each app, although Samsung's own apps are not currently supported. Testing shows varying results in different applications, with Chrome and Google Maps exhibiting different scaling behaviors. There are questions about whether this feature will remain exclusive to the Z Fold 8 and if it will be available across all devices in the Z8 lineup after retail sales begin on August 7.

Winsage

July 27, 2026

Microsoft moves to end pirated Windows activations

Microsoft is introducing the KMS Hardware Secured system to enhance Windows licensing security by making unauthorized activation methods more difficult. This system will use TPM-based attestation to authenticate the server managing activation requests, ensuring only legitimate devices are recognized. Readiness notifications for Windows Server 2025 will begin in August 2026, allowing administrators to prepare for the transition to TPM-based attestation, which is expected to become a requirement for KMS activation in a future Windows Server release. This initiative targets corporate clients using Windows volume licensing to complicate unauthorized activation. Additionally, Microsoft plans to reduce its workforce by approximately 4,800 positions, or nearly 2.1% of its global staff, as part of a corporate transformation strategy.

AppWizard

July 24, 2026

Fitbit Air’s newest update brings nothing new except invisible bug fixes

Google has begun rolling out firmware version 253.2 for the Fitbit Air, focusing on reliability and minor bug fixes without introducing new features. This is the second firmware release for the device, following an update last month. The update will be gradually available over the next few days. Users must ensure their Fitbit Air is charged or connected to its charger with at least 50% battery life and maintain a Bluetooth connection with a phone or tablet that has the latest version of the Google Health app for installation. Google recommends updating during the day or evening to avoid inaccuracies in daily step counts. The installation process takes about 10 minutes and involves using the Google Health app to initiate the update.

AppWizard

July 24, 2026

Samsung may finally let you set screen zoom levels on a per-app basis

Samsung has unveiled its latest foldable devices: the Galaxy Z Fold 8, Z Flip 8, and the Z Fold 8 Ultra. Within the firmware of the Fold 8 Ultra, code suggests a new feature called "App screen zoom," which would allow users to set different screen zoom levels for individual applications. This feature is not yet visible in the device's display settings, as it is not operating on retail firmware. There is potential for this functionality to be available when the devices reach consumers next month and possibly extend to Samsung's broader lineup and the Android ecosystem. An APK teardown indicates this feature is a predictive tool based on preliminary code, with no guarantee of public release.

Winsage

July 20, 2026

Enable BitLocker on Windows 11: 11 Steps, 45 Min [2026]

A stolen laptop can lead to a significant data breach, particularly when taken from public places. Windows 11 has introduced BitLocker, a full-disk encryption feature that became mandatory for Australian businesses in 2026. The Office of the Australian Information Commissioner reported 766 notifiable data breaches in the latter half of 2024, with unauthorized access to devices being a major cause. Full-disk encryption is crucial for compliance with the Essential Eight framework, which mandates data protection on portable devices. BitLocker ensures that data on an encrypted drive becomes unreadable if the drive is removed and connected to another computer. It aligns with the Essential Eight framework, requiring evidence of encryption rather than just claims of protection. There are three types of encryption on Windows 11: Device Encryption, BitLocker Drive Encryption, and File-Level Encryption. BitLocker is available only on Windows 11 Pro and higher editions. To use BitLocker, certain prerequisites must be met, including having Windows 11 Pro or higher, a Trusted Platform Module (TPM) 2.0, UEFI firmware with Secure Boot enabled, and local administrator rights. The process to enable BitLocker involves confirming the edition, checking TPM status, enabling BitLocker through Windows Settings or PowerShell, and backing up the recovery key. Organizations can deploy BitLocker fleet-wide using Microsoft Intune, and additional security measures like TPM+PIN can be implemented for pre-boot authentication. Common pitfalls during BitLocker rollout include skipping recovery key backup and assuming that Home edition machines are covered. Troubleshooting common BitLocker issues involves identifying symptoms and applying appropriate fixes. Advanced tips for enhancing security include suspending BitLocker before maintenance and auditing compliance at the fleet level. BitLocker is integral to protecting data on portable devices, and compliance documentation is essential for proving that every device has an active recovery key.

Winsage

July 20, 2026

Windows 11 Version 26H2 Ships as an Enablement Package With No New Features Over 25H2

Microsoft is set to release Windows 11 version 26H2, an enablement package based on version 25H2, without introducing new features at launch. The update will require only a single restart for devices on versions 25H2 or 24H2, while users on older versions, such as 23H2 or Windows 10, will need a full feature update. Both versions share identical features and are built on the same platform, with version 26H2 using build numbers in the 26300 series. The update process will vary depending on the current version, and version 26H2 will not change hardware requirements. Microsoft plans a gradual rollout of the update, initially as an optional install. Version 26H2 aims to extend support, adding approximately a year to the support timeline, with version 25H2 support continuing until October 2027. Users should verify their current version and back up important files before upgrading.