patches Archives

Winsage

September 23, 2026

New Windows Defender zero-day blocks Microsoft antivirus updates

Security researcher Abdelhamid Naceri, known as Nightmare Eclipse, released a zero-day exploit called BigDiskBuster that targets Microsoft Defender, preventing antivirus updates and leaving systems vulnerable. BigDiskBuster operates across all supported Windows versions and must run in the background to block updates. Naceri has previously released a similar exploit called UnDefend and has a history of releasing multiple zero-day exploits since April 2026 amid a dispute with Microsoft. Two weeks before BigDiskBuster, he introduced another exploit named ShieldCrash, which grants SYSTEM access and circumvents a patched flaw. Naceri's recent exploits include tools like LegacyHive, BlueHammer, RedSun, YellowKey, GreenPlasma, and MiniPlasma, all targeting Microsoft Defender and other Windows components. Microsoft has warned of potential legal action against malicious activities but has not commented on BigDiskBuster.

BetaBeacon

September 22, 2026

Valve Unveils Lepton for Running Android Games on Linux

Valve has open-sourced Lepton, a project designed to enable Android games to run on Linux through Steam, specifically for the upcoming Steam Frame hardware. Lepton runs Android games inside containers, with each application having its own container. It can utilize components from the host OS, supports integration with development and debugging tools, and incorporates patches from various projects. Lepton is not a desktop Android solution for Linux users but focuses on running games within Valve's Steam ecosystem. The source code for Lepton is available on Valve's SteamOS GitLab instance.

Winsage

September 22, 2026

Microsoft is set to revamp the design of outdated dialogue boxes in Windows 11

Microsoft is modernizing the user experience in Windows 11 by redesigning all legacy dialog boxes in response to user feedback. March Rogers, Microsoft's design director, is leading this initiative to ensure consistency across the platform. Specific examples of outdated interfaces include the Speech settings dialog and the Windows recovery menu. Microsoft is using two strategies for updates: incremental updates, which introduce a dark theme across system dialogs, and comprehensive redesigns using the WinUI 3 framework. The Run menu has been completely revamped with a dark theme and improved features, while the previous version remains available for user preference. These updates are currently in test builds of Windows 11. Additionally, Microsoft is rolling out security patches and an emergency patch for issues from the September update.

Winsage

September 21, 2026

Do This If You Want Another Year of Windows 10 Security Updates

Microsoft has extended its security update support for Windows 10 until October 12, 2027, through the Extended Security Updates (ESU) program. This extension allows users to maintain essential protection against threats despite the official end of support last year. The ESU program will continue for existing participants without further action required, while new users can enroll until the program concludes next year. To qualify, devices must be running Windows 10 version 22H2 and have the latest updates installed. Enrollment options include purchasing coverage or redeeming Microsoft Rewards points. The program focuses solely on security, providing critical monthly updates without new features.

BetaBeacon

September 20, 2026

MuMu Player vs GameLoop vs KOPLAYER: Android 15 Gap

Android emulators for PC have become a crowded market with close to a dozen actively maintained clients. Tencent and NetEase have first-party products like GameLoop and MuMu Player to control the PC on-ramp to their mobile catalogs. Independent players like BlueStacks and LDPlayer focus on platform-agnostic performance and feature breadth. KOPLAYER appears to be abandoned in 2026 with no updates, functioning website, or active development. MuMu Player supports Android 15, offering newer features for mobile games. GameLoop is focused on Tencent's mobile titles with updated documentation. MuMu Player and GameLoop are free, while KOPLAYER is also historically free. MuMu Player and GameLoop have ongoing updates and security, while KOPLAYER's lack of updates poses a security risk.

Winsage

September 20, 2026

How Windows turned months of inactivity into a 7-hour update hostage situation

Microsoft is working to reduce the memory footprint of Windows, aiming for acceptable performance with 8 GB of RAM. However, users face challenges with lengthy update processes, as demonstrated by a recent experience where a laptop took approximately seven hours to boot due to numerous updates. This includes patches for Windows components, firmware, and drivers, leading to multiple restarts and frustrating progress bar behavior. The tech industry is recognizing the need for greater efficiencies, but Microsoft must also address the overwhelming frequency of updates that hinder user experience.

Winsage

September 20, 2026

Microsoft Patches Windows Defender Bug That Kept Saying Your Antivirus Was Off

Microsoft resolved an issue in its Windows Security framework that incorrectly indicated Microsoft Defender Antivirus was disabled. This fix was implemented through Defender platform update 4.18.26080.4, released on September 17. The update installs automatically unless users have blocked mandatory security updates. Users had been receiving false alerts during system boot and intermittently afterward, which redirected them to the Windows Security home tab where settings appeared normal. Microsoft acknowledged the issue on August 28, affecting all supported versions of Windows and Windows Server with the latest Defender updates, but did not specify the triggering update. Users in the Windows Insider program reported similar warnings as early as June.

AppWizard

September 18, 2026

GrapheneOS Isn’t Happy With Google Over Pixel’s Widening Head Start

Google's September 2026 Pixel Update Bulletin includes patches that affect standard Android platform code, relevant to both Pixel and non-Pixel devices, which have not been included in the regular monthly Android Security Bulletin. GrapheneOS has noted that Android 17 QPR1 introduced new developer APIs not present in the Android Open Source Project (AOSP) for the first time since Android Honeycomb, with one new package and modifications to sixteen others. GrapheneOS is backporting Pixel firmware and drivers from QPR1 onto Android 17 but lacks permissions to distribute this work. Additionally, there has been a delay in Google’s compliance with a GPL source request, with access granted over two weeks after the initial request. Starting in 2027, Google will require all Android app developers to register with them and provide legal identification and signing key evidence, complicating the process of sideloading unverified apps. GrapheneOS and other organizations are advocating for the Keep Android Open campaign against these developments, which may restrict competition and tighten Google's control over the Android ecosystem.

AppWizard

September 18, 2026

Android apps can now check security patches down to individual device components

The new AndroidX Security State libraries, with stable releases of Security State v1.1.0 and Security State Provider v1.0.0, allow developers to evaluate the security status of individual device components. They provide three levels of security patch information: Device Security Patch Level (DSPL), Published Security Patch Level (PSPL), and Available Security Patch Level (ASPL). These libraries enable checks on critical components of the Android operating system, including system modules and the Linux kernel, which are represented by version numbers rather than monthly patch dates. Applications that prioritize security can utilize this detailed patch information to assess vulnerabilities, particularly those tracked as Common Vulnerabilities and Exposures (CVEs). The libraries also integrate with the Open Source Vulnerabilities (OSV) database for access to Android Security Bulletin data and device-specific vulnerability reports. Additionally, Android 17 allows manufacturers to declare individual security fixes beyond the stated security patch level, and Google is working with manufacturers to transition their OTA update clients to this new standardized system.

BetaBeacon

September 17, 2026

Lepton from Valve to run Android games on Linux is now open source

Valve has opened the source code for Lepton, a compatibility layer for running Android games on Linux. Lepton is designed to work with the Steam client and focuses on getting Android games to run seamlessly on the Linux operating system. It is not intended for general Android use, but specifically for launching games. Lepton also offers features to assist game developers in bringing their VR Android games to Steam. Valve's commitment to open-source projects like Lepton benefits the wider Linux gaming community.