integrity Archives

Winsage

October 1, 2026

Microsoft enables Windows settings backup by default for orgs

Microsoft has updated its Windows settings backup and restore functionality, now automatically enabled for all enterprise systems joined to Microsoft Entra or operating in a hybrid environment after upgrading to Windows 11 version 26H2. The backup tool, previously known as Windows Backup for Organizations, is designed to facilitate the backup and restoration of essential Windows settings for enterprise users during device resets, replacements, upgrades, or reimaging. Originally introduced in November 2024, it became generally available by August 2025. The backup policy will be activated by default for eligible devices following the release of Windows 11, version 26H2 on September 29, 2025, unless administrators have previously configured the policy. The automatic backup feature applies to devices running Windows 11 26H2 in regions not governed by the EU Digital Markets Act and does not require explicit admin configuration for restoring Windows devices. IT administrators can control the backup policy through mobile device management solutions like Microsoft Intune or Group Policy.

Tech Optimizer

September 28, 2026

The Fault Line Spreads: Azure’s September CVE Cluster Now Covers PostgreSQL and Billing

Two newly identified Critical CVEs have expanded Microsoft's September identity infrastructure vulnerabilities to over ten verified weaknesses across more than ten distinct services. The Azure Database for PostgreSQL is vulnerable to CVE-2026-85878, an Improper Authorization flaw (CWE-285) with a CVSS score of 9.9. Azure Billing is impacted by CVE-2026-62874, which presents an Insufficient Data Authenticity Verification issue (CWE-345) with a CVSS score of 10.0. Both vulnerabilities were disclosed on September 18 and validated by Tenable and MITRE. CVE-2026-85878 allows an authorized attacker to elevate privileges over the network with minimal complexity, while CVE-2026-62874 requires no authentication, enabling unauthenticated attackers to jeopardize financial integrity. The vulnerability cluster first emerged during the Patch Tuesday cycles on September 3 and September 8, with initial reports highlighting critical flaws in core services. Other September disclosures include CVE-2026-83711 (Azure AD B2C, CVSS 10.0), CVE-2026-70352 (Azure AI Language, CVSS 10.0), CVE-2026-83941 (Entra ID, CVSS 9.9), CVE-2026-62916 (Entra ID, CVSS 9.1), CVE-2026-69857 (Azure Cosmos DB, CVSS 8.5), and CVE-2026-69854 (Spring Cloud Azure, CVSS 9.0). Activity heightened between September 17 and 18 with the introduction of CVE-2026-77903 (Microsoft Dataverse, CVSS 9.0) and CVE-2026-69843 (Microsoft Fabric, CVSS 10.0). The attack surface has broadened from authentication concerns to encompass trust in AI endpoints, data storage locations, and billing verification processes. Seven out of the ten vulnerabilities are unauthenticated, and all issues were addressed through server-side fixes by Microsoft. The extensive range of affected services suggests these vulnerabilities indicate a shared architectural dependency on authentication logic.

Winsage

September 27, 2026

Windows 11’s driver signature requirement is one of the best anti-consumer security features out there

Windows 11 requires drivers to be digitally signed, a policy aimed at enhancing security by preventing unauthorized code from executing at the kernel level. This requirement, which began with Windows Vista and became mandatory with Windows 10, version 1607, has tightened over the years, especially with the introduction of UEFI Secure Boot and TPM in Windows 11. While this enforcement protects against malware and supports anti-cheat systems in gaming, it limits user autonomy and imposes significant challenges for developers, particularly those working on smaller projects. In contrast, Linux allows users more freedom to modify their systems, though this flexibility can compromise security.

Tech Optimizer

September 26, 2026

What Is End Point Security And How Does It Work?

Endpoint security is a suite of technologies and processes designed to protect devices connected to a business network from cyber threats. It includes various devices such as laptops, smartphones, tablets, servers, and IoT devices. Endpoint security employs a multi-layered approach, scanning for malware, regulating applications, and monitoring device activity for unusual behavior. It is distinct from antivirus software, encompassing a broader range of protective measures, including firewalls, encryption, application controls, patch management, and Endpoint Detection and Response (EDR). The rise of remote work and the increasing number of devices create a larger attack surface, making endpoint security essential for preventing breaches and safeguarding business operations.

AppWizard

September 26, 2026

Guess who patented a new system for in-game ads

Microsoft has a patent titled "Contextually Aware Management of Interactive Software Application Access" (US 202610260258 A1) that describes a system for pausing gameplay to present advertisements to players. Key features include: - A content management system that can suspend user interaction with the game based on a content trigger event. - The presentation of promoted audiovisual content to the user. - A credit system that delays the suspension of user interaction. This system aims to integrate advertisements into gameplay, similar to ad-supported models in mobile gaming. Matthew Ball, Xbox's Chief Strategy Officer, supports in-game advertisements, while EA has launched EA Advertising for in-game integrations and scalable advertising capabilities. The integration of advertisements poses both opportunities and challenges for monetization and user experience in gaming.

Winsage

September 26, 2026

Windows Insiders Can Test Phone Companion Improvements and New Mouse Pointer Effects

Microsoft has released new Windows 11 preview builds for Insiders in the Experimental and Beta Channels. The Experimental build 26340.9577 includes energy recommendations accessible from the system tray’s Quick Settings. The Beta build 26220.9568 allows users to preview recent message content in the Phone Companion by hovering the mouse cursor over it. New Pointer Indicator settings have been added under Settings > Accessibility > Mouse pointer and touch, providing crosshair effects for easier cursor location for users with low vision, which can be toggled with Win + Ctrl + X. The Beta build also features a contrast theme toggle in the Magnifier tool that recolors the interface without altering the original hues of photos, videos, and charts. No new features were introduced in the new 26H1 preview builds for Insiders on both channels, and there was no new release from the Experimental segment.

AppWizard

September 25, 2026

Call of Duty ‘cosmetic toggle’ will cleanse Warzone of its Party City aesthetic

Warzone has introduced a "cosmetic toggle" that allows players to disable legacy character skins at a client level, specifically for Warzone, while Modern Warfare 4 will not carry over any cosmetics from previous titles. This feature aims to address concerns about mismatched crossover skins and create a more cohesive gaming experience. The toggle is a response to previous commitments to avoid old skins, although collaborations have complicated this effort. Its effectiveness may diminish with the introduction of new characters in future seasons, and its future depends on Infinity Ward's commitment to aesthetic integrity and potential expansions of the toggle.

AppWizard

September 24, 2026

Samsung accidentally freezes its smart fridges with a software update

Samsung has paused a SmartThings update for its smart refrigerators in South Korea due to significant malfunctions reported by users, including complete failure of the refrigerators, issues with the automatic door-opening feature, and internal lights not working. A Samsung representative confirmed that an error occurred during the testing of the software update, leading to abnormal symptoms in some units. The company is taking emergency measures and has halted the update distribution. Affected customers are advised to contact service centers, where technicians are replacing motherboards in malfunctioning units. Many customers are also seeking compensation for spoiled food, coinciding with the Chuseok holiday.

Winsage

September 24, 2026

How to Use Point-in-Time Restore in Windows 11

The Point-in-Time Restore feature in Windows 11 allows users to revert their system to a previous state, but it may result in the loss of recently created files. This feature captures the system's state, including Windows system files, installed applications, and local settings. Restore points are generated automatically every 24 hours, but users can create them manually. However, restoring can erase new documents, recently installed applications, and any settings changes made since the last restore point. Files stored in OneDrive remain unaffected. To verify Point-in-Time Restore settings, users must access the Settings application, select System, and then Recovery. Restore points are retained for up to 72 hours and may be deleted sooner if storage is limited. Windows 11 version 26H2 enables this feature by default for devices with an OS volume of at least 200 GB. Before restoring, users should back up recent work to an external drive. To initiate the restore, access the Windows Recovery Environment, select Troubleshoot, and then Point-in-Time Restore. If files are lost after a restore, 4DDiG Data Recovery Software can help recover deleted files. It scans local drives for files deleted during a rollback or accidental deletion. A robust recovery plan should include using Point-in-Time Restore, OneDrive for daily file protection, and separate backups before significant system changes.

Tech Optimizer

September 23, 2026

BigDiskBuster PoC Blocks Windows Defender Updates

A new tool named BigDiskBuster has been released on GitHub, which disrupts Microsoft Defender Antivirus by preventing it from installing updates. It does this by consuming available disk space during the update process, causing Defender to remain on its current version and unable to receive new platform or signature updates. BigDiskBuster operates as a local denial-of-service technique and requires prior access to the target machine to execute. The tool was created by researcher Abdelhamid Naceri, known as Nightmare Eclipse, who has previously worked on similar projects. As of now, there is no CVE identifier, patch, or advisory from Microsoft regarding this issue.