Microsoft Edge

Winsage
May 16, 2026
On May 14, Pwn2Own Berlin 2026 began, where researchers earned ,000 for 24 unique zero-day vulnerabilities. Cheng-Da Tsai, also known as Orange Tsai, achieved a significant Edge sandbox escape, earning ,000, and later exploited Microsoft Exchange for remote code execution, earning an additional ,000. Tsai accumulated 17.5 Master of Pwn points, contributing to DEVCORE's lead with ,000 in total earnings. Other researchers, including Angelboy and TwinkleStar03, earned ,000 for an Improper Access Control vulnerability, while Marcin Wiązowski and Kentaro Kawane also contributed successful exploits. By the end of Day One, DEVCORE led with ,000, and the event featured a prize pool exceeding ,000,000 across 31 targets. As of Day Two, a total of ,750 had been awarded for 39 unique vulnerabilities, with DEVCORE leading at 40.5 points and ,000 in earnings.
Winsage
May 14, 2026
On the inaugural day of Pwn2Own Berlin 2026, a total of ,000 was awarded to security researchers for exploiting 24 unique zero-day vulnerabilities. Orange Tsai earned ,000 for chaining four logic bugs to achieve a sandbox escape on Microsoft Edge. Windows 11 was targeted by Angelboy, TwinkleStar03, Marcin Wiązowski, and Kentaro Kawane, each earning ,000 for demonstrating new privilege escalation zero-days. Valentina Palmiotti earned ,000 for rooting Red Hat Linux for Workstations and an additional ,000 for a zero-day in the NVIDIA Container Toolkit. Other notable exploits included k3vg3n earning ,000 for taking down LiteLLM, Satoki Tsuji and haehae earning ,000 for exploiting NVIDIA Megatron Bridge zero-days, Compass Security and maitai earning ,000 each for hacking OpenAI's Codex, haehae earning ,000 for a Chroma zero-day, and STARLabs SG earning ,000 for exploiting a LM Studio zero-day. The DEVCORE Research Team leads the competition with ,000 in earnings, followed by Valentina Palmiotti with ,000. The contest is held at the OffensiveCon conference from May 14 to May 16, with over ,000,000 in cash and prizes available. Participants must target fully patched products and demonstrate arbitrary code execution. Vendors have a 90-day window to release security fixes after zero-day flaws are disclosed. Last year, the TrendMicro Zero Day Initiative awarded ,078,750 for 29 zero-day vulnerabilities.
Winsage
May 11, 2026
Microsoft has rolled out four Windows Insider builds, introduced new hidden features, and revamped the Windows Run feature. Despite these advancements, many Windows 10 users are hesitant to upgrade due to financial constraints. Xbox Mode has received criticism for its performance on dual monitor setups. Approximately 25% of Windows users on Steam are still using Windows 10. Windows 11 will enhance CPU frequency during high-priority tasks, and recent Insider builds have improved touchpad gestures, File Explorer descriptions, and voice-typing interface. Users can now prevent Chrome and Edge from automatically downloading local AI models. Feedback on new features like the Low Latency Profile has been predominantly negative, with users expressing concerns over CPU spikes.
Tech Optimizer
May 4, 2026
Neil J. Rubenking's article argues against relying solely on Microsoft Defender for antivirus protection, claiming it is inadequate for users managing multiple devices. However, the author contends that Windows Defender provides essential protection with minimal fuss and operates effectively in the background. The article suggests that third-party antivirus solutions are necessary for cross-device management, but the author believes that many devices are inherently secure and that users prefer a straightforward approach to security. The article also states that Defender's phishing protection is limited to Microsoft Edge, while the author points out that most modern browsers have similar protections. Additionally, the critique of Defender for lacking extra features found in third-party applications is countered by the author, who argues that many of those features are unnecessary or redundant. The article mentions the rise of AI-driven scams and suggests that third-party antivirus companies have adapted with specialized tools, but the author believes existing email provider filters are often sufficient. Lastly, while the article critiques Defender's user interface for being less visually appealing, the author emphasizes the importance of functionality over aesthetics. Overall, the author advocates for a streamlined approach to cybersecurity that leverages built-in protections and sound practices.
Winsage
May 4, 2026
Microsoft has announced the retirement of the sidebar app list in Microsoft Edge, affecting users with Microsoft accounts. New apps will no longer be added to the sidebar, and existing pinned applications will be phased out in an upcoming update. The popular Copilot feature will remain unaffected. Many users have expressed their intent to abandon Edge if the sidebar is removed. Microsoft plans to focus on refining existing functionalities across its platforms, including Windows 11 and Microsoft Edge, in 2026.
Search