IT departments Archives

Tech Optimizer

July 25, 2026

Scrappy RAT Malware Targets Chrome And Edge Users

A new remote access trojan (RAT) named msaRAT has been identified by Cisco Talos, linked to the Chaos ransomware group and built using Rust. It exploits Chrome and Edge browsers to disguise its traffic and evade detection. MsaRAT operates through a headless browser process, enabling remote code execution and facilitating ransomware deployment, data theft, and other malicious activities. It is typically installed via phishing emails or malicious files, making it resistant to standard browser patches. Cisco Talos recommends specific SNORT rules and a ClamAV signature for detection. Indicators of Compromise (IoC) include traffic to the IP address 172.86.126.18 and the domain is-01-ast.ols-img-12.workers.dev. The malware primarily targets large organizations, but individual users may also be at risk.

Winsage

July 16, 2026

Windows 11 24H2 Home and Pro reach end of support in 90 days

Microsoft announced that Windows 10 Enterprise LTSB 2016 and Windows 11 24H2 Home and Pro editions will stop receiving updates on October 13, 2026. The Enterprise and Education editions will continue to receive mainstream support until October 12, 2027. Users are encouraged to upgrade to Windows 11 25H2, which became available in September 2024. For unmanaged Windows 11 24H2 Home and Pro users, the transition to 25H2 will occur automatically, although they can postpone the update. Microsoft has also extended the free Windows 10 Extended Security Updates program for consumers until October 12, 2027.

Winsage

July 7, 2026

New Windows 11 Cloud Recovery Restores PCs And Drivers Without A USB Drive

Microsoft is introducing a new feature called 'Cloud rebuild' in the latest Windows 11 Insider Preview builds, which allows users to reinstall the operating system directly from Microsoft's servers without the need for installation media. This feature bypasses local issues that may prevent a system from resetting itself, as it connects to Windows Update to download a fresh copy of the OS. Cloud rebuild also improves driver handling by fetching hardware-specific drivers during the reinstall process, ensuring the machine is online and ready to go. Users must enroll in the Insider program's Experimental channel to access this feature, which appears under the Troubleshoot menu when a PC fails to boot multiple times. A wired Ethernet connection works immediately, while Wi-Fi requires entering the network password. However, the feature has caveats, including the need for a working network driver in the recovery environment and compliance with Windows 11 hardware requirements. The Cloud rebuild process completely wipes the system disk, erasing all local files, applications, accounts, and settings, although data synced to OneDrive remains intact. Microsoft warns against shutting down the system during the rebuild process, as it could prevent Windows from booting.

Winsage

June 28, 2026

Microsoft denies WSL 3 exists, reveals Windows 11’s WSL Containers ship next week

Microsoft has clarified that there is no WSL 3 in development, as stated by Craig Loewen, the Product Manager for the Windows Subsystem for Linux (WSL). The confusion arose from articles discussing a new feature called WSL Containers, which will be launched soon. WSL allows users to run Linux environments on Windows without dual-booting, while WSL Containers enable the creation and management of Linux containers directly within Windows, eliminating the need for third-party tools like Docker Desktop. WSL 1, introduced in 2016, served as a translation layer for Linux system calls, and WSL 2, launched in 2019, included a full Linux kernel in a lightweight virtual machine. WSL Containers is an enhancement to WSL, allowing developers to build, run, and deploy containers directly from Windows using the wslc.exe command. This feature is part of Microsoft's strategy to make Windows a more accessible platform for running Linux workloads, helping to retain developers who might consider switching to other operating systems.

Winsage

June 23, 2026

Microsoft is now force-upgrading all Windows 11 home PCs to 25H2

Microsoft is mandating an upgrade to Windows 11 version 25H2 for all Home and Pro PCs not managed by IT departments. Previously optional, this upgrade will now automatically transition devices running the outdated 23H2 to 25H2. The rollout will utilize machine learning for a seamless experience. The upgrade is expected to take only a few minutes and requires a single restart, extending support for users by an additional 12 months. Users can manually initiate the upgrade by checking for updates in Windows Settings.

Winsage

June 22, 2026

Windows 11 26H2 arrives as a tiny unlock, not a massive download

Microsoft has confirmed the release of Windows 11 26H2, scheduled for Fall 2026. This update focuses on improving the update experience for businesses and IT professionals by streamlining maintenance processes. Windows 11 26H2 will be delivered as an enablement package, activating pre-existing code on eligible devices, ensuring a swift installation with minimal disruption. It will unlock features from earlier versions, specifically Windows 11 24H2 and 25H2, allowing a seamless transition with minimal operational downtime. The update is currently available to Windows Insiders and emphasizes a predictable, low-disruption experience for IT departments. Key advantages include a streamlined installation process, minimal user disruption, no need for complete reinstallation, consistent security and quality updates, and uniform compatibility checks. The specific release date has not been announced, but it will arrive in the latter half of 2026. The hardware requirements remain the same as previous versions: a minimum of 4GB of RAM, 64GB of storage, and a 1GHz 64-bit dual-core processor.

Winsage

June 12, 2026

June’s Windows 10 patch has a BitLocker user lockout problem… again

Microsoft released a cumulative update for Windows 10, designated as KB5094127, during the latest Patch Tuesday. Some users are experiencing issues where they are prompted to enter their BitLocker recovery key after installing the update. This problem is linked to systems with an "unrecommended" BitLocker Group Policy configuration and has occurred in previous updates. Specific conditions that can lead to this issue include having BitLocker enabled on the operating system drive, a certain Group Policy setting configured, the System Information tool reporting a specific Secure Boot State, the presence of a particular certificate in the Secure Boot Signature Database, and not using the 2023-signed Windows Boot Manager. Affected users may face difficulties accessing their BitLocker recovery key, potentially leading to lockouts. Microsoft suggests that personal devices are less likely to be affected, with the issue primarily impacting enterprise setups. The company is working on a resolution and advises IT administrators to consider removing the Group Policy configuration before installing the update. Update KB5094127 is available only to Windows 10 users in the Extended Security Updates program for versions 21H2 and 22H2, addressing various bugs and security vulnerabilities.

Winsage

June 11, 2026

Microsoft fixes BitLocker recovery bug on Windows Server 2025

Microsoft has resolved an issue affecting certain Windows Server 2025 devices that were booting into BitLocker recovery mode after the April 2026 security update. This issue was linked to specific BitLocker Group Policy configurations and required users to input their BitLocker recovery key upon the first restart after the update. However, this key would only need to be entered once for subsequent restarts, provided the group policy configuration remained unchanged. The problem primarily affected enterprise systems rather than personal devices. The issue arose under specific conditions: BitLocker was enabled on the operating system drive, a particular Group Policy was set, the Secure Boot State PCR7 Binding was "Not Possible," the Windows UEFI CA 2023 certificate was present, and the device was not already using the 2023-signed Windows Boot Manager. Microsoft released fixes in the KB5094125 and KB5093998 updates to address this problem, preventing devices with incompatible group policy configurations from installing the 2023-signed Windows Boot Manager. Event ID 1032 in the System event log indicates the issue when Windows updates are installed. For IT administrators unable to deploy the latest updates, it is recommended to remove the Group Policy configuration before installing updates or to implement a Known Issue Rollback (KIR) on affected devices. Additionally, Microsoft had previously addressed similar BitLocker recovery issues in August 2024 and May 2025.

Winsage

June 5, 2026

Microsoft Promises Customizable Windows Right-Click Menus

Microsoft is working on a more efficient, streamlined, and customizable right-click context menu for Windows File Explorer and Desktop interactions, responding to user feedback about the cluttered nature of existing menus. The initiative aims to improve user experience by allowing customization, which marks a shift from Microsoft's previous rigid approach. Developers will need to adapt to new APIs and guidelines for context menu interactions, and there may be restrictions on the number of items that can be added. Performance improvements are also planned to address slow-loading context menus. The timeline for implementation is uncertain, but updates may first appear through Windows Insider testing channels. The changes are part of Microsoft's broader strategy to modernize Windows 11 and improve basic functionalities like file management and interface responsiveness. Customizable context menus could provide enterprise IT departments with new management options, and the initiative reflects Microsoft's awareness of competition from other operating systems.

Winsage

June 4, 2026

June 9 Patch Tuesday incoming as Secure Boot deadline looms

Microsoft has announced updates to Secure Boot, enhancing system security by modifying support and registry keys to streamline the boot process. These updates aim to improve the security of Windows devices by ensuring that only trusted software is loaded during startup. Collaborations with Dell and STMicroelectronics are also underway to provide tailored support and integrate advanced security features into chipsets, respectively.