NewApp Digest
search bot

Microsoft products

Microsoft releases Windows security update addressing 723 flaws
Winsage
September 8, 2026

Microsoft releases Windows security update addressing 723 flaws

Microsoft released its September 2026 security updates, addressing two critical Windows elevation-of-privilege vulnerabilities: CVE-2026-85880 and CVE-2026-81963. Both vulnerabilities were exploited before their public disclosure on September 8. CVE-2026-85880 involves a heap-based buffer overflow in the Windows Advanced Local Procedure Call (ALPC), allowing low-privileged attackers to gain SYSTEM privileges. CVE-2026-81963 affects the Windows Update Stack due to improper link resolution and access controls, enabling similar privilege escalation. The September release also includes 974 Common Vulnerabilities and Exposures (CVEs) across various Microsoft products, with 723 affecting Windows. Users of Windows 11 24H2 and 25H2 receive updates via KB5124008, while Windows 11 26H1 receives KB5124012. Windows 11 24H2 Home or Pro editions will reach end of servicing on October 13, 2026. Users are advised to install the updates promptly and back up important data.
Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC
Tech Optimizer
September 3, 2026

Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC

Nightmare Eclipse, a security researcher known for identifying vulnerabilities in Microsoft products, has shifted focus to other vendors, revealing a zero-day vulnerability called FalconFlank that targets CrowdStrike’s Falcon endpoint security platform. FalconFlank is a privilege escalation vulnerability that exploits the Microsoft Office malicious macros remediation feature within CrowdStrike Falcon. CrowdStrike is investigating the claims and advises customers to disable the Microsoft Office File Suspicious Macro Removal Windows policy setting while assuring them of continued protection through Cloud Anti-malware settings. The exploit works on fully updated Windows 11 25H2 and Windows Server 2025 systems running CrowdStrike Falcon with Optimal Protection enabled. Nightmare Eclipse has also discovered other vulnerabilities, including HardBreacher affecting Kaspersky’s endpoint antivirus and PrettyPrague in Gen Digital’s Avast antivirus, which allows attackers to dump the SAM database. Gen Digital is developing a patch for the Avast vulnerability, while Kaspersky has not commented. Additionally, Nightmare disclosed a memory corruption zero-day vulnerability in Nvidia, named GreenSection, which causes system crashes.
Why governments worldwide are abandoning Windows for homegrown Linux alternatives
Winsage
September 1, 2026

Why governments worldwide are abandoning Windows for homegrown Linux alternatives

Windows is the most widely used desktop operating system, but Linux is gaining popularity among government entities globally, driven by a desire for independence from Western software due to geopolitical tensions. France plans to transition government workstations from Windows to Linux as part of a broader European movement for digital sovereignty, with the national police force having migrated 97% of its computers to a customized version of Ubuntu called GendBuntu. Germany is also adopting Linux, with Munich creating a customized distribution called LiMuX and other states like Mecklenburg-Vorpommern shifting to open-source platforms like Nextcloud. In Russia, the government is deploying Astra Linux to reduce reliance on Microsoft products following the Ukraine conflict. China is promoting Kylin OS, a Linux-based system, to achieve software self-sufficiency after the end of support for Windows 10. Governments are increasingly turning to Linux to diminish dependence on American technology and foster digital autonomy.
CISA: Windows Task Host flaw now exploited by ransomware gangs
Winsage
August 18, 2026

CISA: Windows Task Host flaw now exploited by ransomware gangs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) confirmed that ransomware gangs are exploiting a significant vulnerability in the Windows Task Host system, tracked as CVE-2025-60710. This high-severity flaw, affecting Windows 11 and Windows Server 2025, allows local attackers with basic user permissions to escalate their privileges to SYSTEM level. Microsoft patched this vulnerability in November 2025, but it poses a threat to unpatched devices. CISA added CVE-2025-60710 to its list of actively exploited vulnerabilities on April 13 and provided Federal Civilian Executive Branch agencies with a two-week window to secure their systems. CISA warns that such vulnerabilities are frequent attack vectors for malicious actors and urges organizations to apply mitigations or discontinue the use of affected products. Additionally, CISA noted that ransomware groups are also exploiting a Microsoft SharePoint remote code execution vulnerability (CVE-2026-45659), confirmed to be actively exploited in early July. Since November 2021, CISA has identified 383 actively exploited vulnerabilities across various Microsoft products, with 112 being used in ransomware attacks.
Microsoft warns users to install Windows 11's latest update within 3 days, 400+ security bugs fixed
Winsage
August 14, 2026

Microsoft warns users to install Windows 11’s latest update within 3 days, 400+ security bugs fixed

Windows 11's August 2026 Patch Tuesday update has been released, addressing 421 security vulnerabilities, including 400 specific to the Patch Tuesday release. The update rectifies at least 37 remote code execution bugs and five elevation-of-privilege vulnerabilities. Microsoft advises users to implement the update within three days for security. The update includes fixes for other Microsoft products like Entra, Office, and Teams. Users should verify their Windows 11 build number, with recommended versions being 26200.9168 for 25H2 and 26100.9168 for 24H2. The update is identified as KB5121003 and may require up to two reboots to apply fully. Key areas of focus in the update include the kernel, Remote Desktop, DNS, DHCP, SMB, and Windows Defender Firewall. Microsoft emphasizes the importance of timely updates and recommends limiting the deferral period for quality updates to less than three days.
Nightmare Eclipse Drops Windows Zero-Day Exploit ‘ShieldBreak’
Winsage
August 13, 2026

Nightmare Eclipse Drops Windows Zero-Day Exploit ‘ShieldBreak’

Security researcher Nightmare Eclipse has released a zero-day exploit named ShieldBreak that allows privilege escalation on Windows by targeting a vulnerability in Microsoft Defender. This exploit, designated as CVE-2026-50656, is categorized as a race condition vulnerability and affects the latest versions of Windows 11 and Windows Server 2025, with potential impacts on Windows 10. The exploit was disclosed on June 9, 2026, and Microsoft acknowledged the issue on June 16, rolling out fixes by July 9. The mechanics of ShieldBreak involve manipulating Defender’s scan path and executing a scheduled task to gain System-level privileges. Experts have noted differences between ShieldBreak and the previously known RoguePlanet exploit, emphasizing that ShieldBreak requires Defender to be active to function.
Microsoft fixes 421 bugs and a Windows zero-day in August Patch Tuesday
Winsage
August 12, 2026

Microsoft fixes 421 bugs and a Windows zero-day in August Patch Tuesday

Microsoft's August Patch Tuesday update addressed 421 vulnerabilities across various products, including multiple versions of Windows (11 25H2/24H2, 11 23H2, and 10). A critical zero-day flaw, the "Windows Ancillary Function Driver for WinSock Elevation of Privilege Vulnerability," allows attackers with lower-level access to gain system privileges without user interaction. Additionally, the update addresses two other zero-day flaws, including the "Windows User Profile Service Elevation of Privilege Vulnerability," which has not yet been exploited but was publicly disclosed. The update is mandatory and should automatically install on supported PCs, with users encouraged to verify its application. The update also includes minor improvements to Windows features, such as enhancements to File Explorer, Windows Hello, Voice Access, and touchpad controls.
Redmond's reaper cometh: October 2026 set to bury a graveyard of Microsoft products
Winsage
July 22, 2026

Redmond’s reaper cometh: October 2026 set to bury a graveyard of Microsoft products

October 2026 will see the end of support for several Microsoft products, including Office LTSC 2021, which requires organizations to transition to LTSC 2024 or Microsoft 365 for continued support. Windows Server 2022 will exit mainstream support on October 13, 2026, while Windows 11 24H2 Home and Pro editions will also reach their end of life on the same date. The enterprise and education versions of Windows 11 23H2 will be supported until November 10, 2026. Publisher 2021 will be discontinued without a successor. Additionally, Entra ID Sign-In risk policies will be phased out on October 1, 2026, necessitating a transition to Conditional Access to maintain user and sign-in risk protection. SQL Server 2017 is scheduled for retirement in October 2027.
Microsoft confirms Windows Server Update Services sync delays
Winsage
July 20, 2026

Microsoft confirms Windows Server Update Services sync delays

Microsoft is addressing an issue impacting Windows Server Update Services (WSUS) servers, causing synchronization challenges for over a week. WSUS, used to manage updates for Microsoft products across enterprise networks, typically syncs daily with Microsoft Update servers. The ongoing issue has disrupted this process, affecting both client platforms (Windows 10 version 1607 and later) and server platforms (Windows Server 2012 and later). Microsoft acknowledged reports of increased synchronization times and sync operation timeouts, with the situation escalating on July 13, 2026. Mitigation measures were implemented to alleviate synchronization issues for newly installed or rebuilt WSUS servers, and Microsoft is working on solutions for previously affected servers. Synchronization times have been restored for new installations, but efforts continue to assist customers in removing affected metadata from older servers. This is not the first WSUS-related challenge for Microsoft; similar issues occurred in May 2025 and July 2025, with resolutions provided shortly after.
Search