management

Winsage
September 9, 2026
The September 2026 security cycle revealed a bifurcated approach to vulnerability management by Microsoft, focusing on cloud-side identity services with silent mitigations and traditional Patch Tuesday updates for on-premises Windows infrastructure. On September 3, Microsoft addressed nine cloud-side vulnerabilities, including two with a CVSS score of 10.0: CVE-2026-83711 (Azure AD B2C elevation of privilege) and CVE-2026-70352 (Azure AI Language Authoring missing authentication). Additionally, CVE-2026-83941 (Entra ID elevation of privilege, rated 9.9) and CVE-2026-80098 (Copilot Studio cryptographic flaw) were noted. On September 8, the Patch Tuesday update addressed 70 CVEs, including critical issues in the on-premises stack, such as CVE-2026-83939 (Windows Secure Kernel Mode elevation of privilege). CVE-2026-69414 (ShieldBreak), an elevation of privilege vulnerability in the Defender Malware Protection Engine, was patched out-of-band on September 3 after being publicly exposed for three weeks. Microsoft is shifting its Self-Service Password Reset (SSPR) enforcement to default to passkeys as of September 7, with plans to phase out SMS and voice-based authentication by February 2027. This aims to enhance security by moving away from legacy credentials.
Winsage
September 9, 2026
Microsoft has released new Windows 11 preview builds for testing, featuring several enhancements. Key updates include: - Enhanced sound settings with redesigned volume sliders that provide real-time audio feedback and the migration of more Control Panel sound settings to Windows Settings. This includes options to set default audio devices, enable hardware acceleration, configure exclusive mode, and adjust adaptive communication sound levels. The All sound devices page has also been improved for easier management of audio devices. - Improved cross-device functionality allowing users to download the Windows app for a phone directly from the Taskbar via Phone Link, facilitating easier task resumption across devices.
AppWizard
September 8, 2026
Connecticut's attorney general is investigating Kik, a messaging app popular with teenagers, due to concerns about its age verification, privacy, and content moderation practices, labeling it a “predator’s paradise.” This inquiry is part of a larger effort by the state to examine online platforms that may inadequately protect children. Attorney General William Tong stated a commitment to using enforcement powers to hold Big Tech accountable for minors' safety. Recent actions include a settlement with Meta Platforms Inc. and an ongoing investigation into Roblox Corp. Kik's policies, particularly its lack of stringent age verification and content moderation, have raised alarms about risks to its teenage users. The investigation will assess Kik's management of user data, privacy safeguards, and content moderation practices.
BetaBeacon
September 8, 2026
Wave Launcher, an Android launcher inspired by the PlayStation-style XrossMediaBar design, has officially reached its V1.0 release. It prioritizes controller-first functionality, offers game management features, robust asset scraping capabilities, multimedia functionality, and extras such as FTP support and Discord Rich Presence integration. It is available for download on its official page and GitHub.
AppWizard
September 8, 2026
The Sony Xperia 1 VIII is receiving an upgrade to Android 17, with the rollout currently live in the UK and Germany, featuring software version 73.1.A.2.61 and a download size of approximately 1.2GB. Key features include a new Desktop mode for connecting to external displays, enhanced personalization options, improved Quick settings panel, advanced screen recording capabilities, and enhancements to the AI Camera Assistant. The update is also available for the Xperia 1 VII, Xperia 1 VI, Xperia 10 VIII, and Xperia 10 VII. The Xperia 1 VIII is set to receive four major OS updates and six years of security updates.
Tech Optimizer
September 7, 2026
Endpoint detection and response (EDR) continuously records process, file, registry, and network activity on endpoints, applying behavioral analytics to identify attacker techniques while providing tools for investigation and containment. Several EDR platforms have emerged, each catering to different organizational needs: 1. CrowdStrike: Best overall for its rich telemetry and elite threat intelligence. 2. SentinelOne: Best for autonomous response, featuring strong containment and rollback capabilities. 3. Microsoft Defender for Endpoint: Best value for organizations already using Microsoft 365 E5. 4. Palo Alto Cortex XDR: Best for native data fusion across endpoint, network, and cloud telemetry. 5. Sophos: Best for generalist IT teams due to its user-friendly interface. 6. Trend Micro: Best for server and workload coverage, focusing on cloud and hybrid environments. 7. Bitdefender: Best mid-market value with strong detection capabilities at an accessible price. 8. Trellix: Best for organizations already using Trellix products, offering integrated solutions. 9. Huntress Managed EDR: Best for managed endpoint security, ideal for teams lacking full staffing. 10. Cisco Secure Endpoint: Best for Cisco environments, integrating well with Cisco security solutions. Key differentiators among these platforms include the analyst burden, alert management efficiency, and the impact of retention policies on investigation quality. The evaluation of EDR solutions should consider detection depth, response capabilities, operational costs, and the specific needs of the organization.
Winsage
September 7, 2026
Switzerland's federal government plans to reduce its reliance on Microsoft 365 and is exploring alternative software solutions, reflecting a trend among European nations for digital sovereignty. The initiative includes transitioning 3,000 Swiss workstations away from Microsoft 365. Concerns about data protection and potential risks of data leaks from foreign systems are primary motivations for this shift, alongside rising license costs. Professor Matthias Stürmer has highlighted the risks of foreign access to sensitive data. Microsoft has introduced its Sovereign Cloud to address these concerns, but apprehensions remain among governments in Switzerland, Germany, and France regarding data sovereignty.
Tech Optimizer
September 7, 2026
Intego ONE Complete has launched the Intego ONE: VPN & Wi-Fi Security app for iPhone, available at no extra charge to Complete subscribers. The app provides VPN protection, Wi-Fi security assessments, and checks on built-in iPhone security settings but does not function as antivirus software. It enhances existing Apple security measures by addressing vulnerabilities related to insecure Wi-Fi connections and unprotected internet access. The app is accessible to both new and existing subscribers, and Intego is currently offering a 50% discount on subscriptions until September 30, 2026. Intego ONE is available in three tiers: Essential, Advanced, and Complete, with the Complete tier including the new iPhone app. The app features a VPN that encrypts internet connections on public Wi-Fi, Wi-Fi security checks, and assessments of iPhone security settings. While traditional viruses are rare on iPhones, threats like spyware and exploits still exist. The app does not replace Apple's malware protection but complements it. Intego ONE Complete is recommended for Mac and iPhone owners, particularly those who travel frequently or connect to public Wi-Fi. The pricing includes various deals, with a 50% discount currently available and a subsequent 35% discount after the promotional period.
Search