policies Archives

Winsage

April 27, 2026

Windows 11 KB5083769: The April Update may require the recovery key on certain BitLocker-enabled systems

The April update KB5083769 for Windows 11 versions 24H2 and 25H2, released on April 14, 2026, has a known issue where certain devices may enter BitLocker recovery mode after installation. This problem affects a limited subset of devices with specific, non-recommended BitLocker Group Policy settings. The issue arises when BitLocker is activated, a specific TPM platform validation policy is set to include PCR7, PCR7 binding is not feasible, the Windows UEFI CA 2023 certificate is present, and the device is not using the 2023-signed Windows Boot Manager. Microsoft advises organizations to review their BitLocker Group Policy settings and verify PCR7 binding status before deploying the update to prevent devices from requesting recovery keys. If the recovery prompt appears, users will need to enter the BitLocker recovery key, but subsequent reboots should not trigger the recovery process again if the Group Policy remains unchanged.

Winsage

April 26, 2026

Go straight to sell! Windows second-chance setup hawks Microsoft services at IT’s expense

Months after acquiring a laptop, users may encounter a prompt from Windows 11 stating, “You’re almost done setting up your PC.” This leads to a series of inquiries about adopting Microsoft’s recommended browser settings, linking a phone for SMS notifications, and acknowledging Office installation. Users may feel compelled to click through these prompts, which can include advertisements, such as for Xbox Game Pass Premium at .99 per month. This series of prompts is referred to as the Second Chance Out of Box Experience (SCOOBE), which can resurface due to Windows updates and may lead to unnecessary support calls and potential unauthorized subscriptions in organizational settings. Users can disable SCOOBE by adjusting settings in Windows or Group Policy, but ongoing vigilance is required due to the evolving nature of Microsoft’s software.

AppWizard

April 25, 2026

Widespread controversy surrounds “Messenger”… What is the truth behind the suspension and what will happen to your messages?

Reports from Washington, DC, have raised concerns among Messenger app users regarding the future of the app and user data. Clarifications indicate that there is no complete shutdown planned for the app, but potential updates or modifications to services and features may occur. The parent company routinely implements updates, which may include removing outdated features or integrating services into other applications. User conversations are not being abruptly deleted; they remain securely stored in line with the company's storage policies, and users can access their data as long as their accounts are active. Experts advise users to stay informed through official updates and to be cautious of rumors on social media regarding privacy and data security.

Winsage

April 24, 2026

Microsoft to roll out Entra passkeys on Windows in late April

Microsoft will introduce passkey support for phishing-resistant passwordless authentication on Microsoft Entra-protected resources starting in late April, with broader availability expected by mid-June 2026. This feature will allow passwordless sign-in on unmanaged Windows devices and will support various device types, including corporate, personal, and shared options. Administrators can manage passkeys through Conditional Access and Authentication Methods policies. Users can create device-bound passkeys stored securely within the Windows Hello container, using methods like facial recognition, fingerprint scanning, or a PIN. The passkeys will adhere to FIDO2 standards and will be securely bound to individual devices, preventing transmission over the network to enhance security against phishing and malware attacks. Microsoft has also announced plans for mandatory multifactor authentication registration for Entra tenants by October 2024 and that all new accounts will be passwordless by default starting in May 2025.

Tech Optimizer

April 23, 2026

Take Control: Customer-Managed Keys for Lakebase Postgres

Encryption at rest is essential for cloud environments, especially in regulated sectors. Lakebase offers Customer Managed Keys (CMK), allowing organizations to control their encryption keys from preferred Key Management Services (KMS) like AWS KMS, Azure Key Vault, or Google Cloud KMS. Lakebase CMK manages both persistent storage and ephemeral compute, ensuring data security. Lakebase's architecture separates storage and compute layers, enabling elastic scaling and serverless operations. The storage layer maintains persistent data, while the compute layer consists of dynamic Postgres instances. This separation poses encryption challenges, addressed by Lakebase CMK through a hierarchical Envelope Encryption model. The key hierarchy includes: 1. Customer Managed Key (CMK): The Root of Trust in the cloud KMS, never accessed in plaintext by Databricks. 2. Key Encryption Key (KEK): A transient key for wrapping data keys. 3. Data Encryption Keys (DEKs): Unique keys for each data segment, stored in an encrypted state. When data access is needed, Lakebase retrieves DEKs by unwrapping keys from the KMS. If a key is revoked, access to the data is denied, and ephemeral compute instances are terminated. In practice, CMK applies to: 1. Persistence Layer (Storage): All data segments are encrypted with keys controlled by the CMK. 2. Ephemeral Layer (Compute): Each compute instance generates a unique ephemeral key, and upon revocation, the instance is terminated, destroying in-memory keys. CMK implementation follows a delegation model, allowing Security Admins to manage keys without accessing data. The process includes key configuration, workspace binding, and lifecycle management. Key rotation is seamless, requiring no data re-encryption. All cryptographic operations involving the CMK are logged by the cloud provider's audit service. Lakebase CMK is available for Enterprise tier customers, allowing organizations to manage their encryption keys effectively.

AppWizard

April 23, 2026

Australian Government Demands to Know What Roblox, Minecraft, Fortnite, and Steam are Doing to Prevent Grooming, Radicalisation

The Australian Government's eSafety office has requested major gaming platforms, including Roblox, Microsoft, Epic, and Valve, to provide details on their measures to prevent child grooming and extremist content. The eSafety office has issued legally enforceable transparency notices due to concerns that platforms like Roblox, Minecraft, Fortnite, and Steam may be exploited by predators and extremist groups. Approximately 90% of children aged 8 to 17 in Australia engage with online games, highlighting the need for protective measures. Reports indicate that these platforms have been associated with grooming incidents and extremist themes, including games inspired by the Islamic State and depictions of mass shootings. Non-compliance with the transparency notice could result in penalties of AUD5,000 per day. In response, Roblox has committed to safety initiatives, including AI technology to review content and plans for age-based accounts to enhance user safety.

AppWizard

April 23, 2026

Medieval sandbox sim Noble Legacy just got much more realistic, but it’s the new town pets I’m most excited about

A significant update for Noble Legacy has been released, introducing substantial changes to the medieval simulation game developed by Studio 369. The update enhances town management, allowing for larger player towns and improved villager behavior, including new factors like temperature and cleanliness. Players can recruit villagers, assign tasks, and create production chains while managing local issues and defending against bandit raids. Titled "Life, Death, and Industry," the update adds survival elements, improves villager AI with unique traits and dialogues, and emphasizes health management through warmth and hygiene. New facilities like bathhouses and apothecaries are introduced, along with a system of afflictions affecting villager performance. The population cap has increased from 50 to 70, and players can implement kingdom-wide policies through edicts. The update also features the first unique hero recruit, Hardwin the Hermit, and introduces two new scenarios along with dynamic quest generation systems. Bandit behavior has shifted to focus on resource targeting, and players can now keep town pets that assist during raids. New trading options for livestock and visual updates to buildings and armor sets have been added. A custom game mode for difficulty adjustments and a creative mode for unrestricted building are also included. The update is live and available at a discounted price until April 27.

AppWizard

April 21, 2026

Roblox is finally cracking down on illicit games as security continues to tighten

In Roblox, 'condos' refer to user-generated games with sexual themes, which are prohibited on the platform. Due to insufficient moderation, much of this content has evaded automated filters. Roblox recently settled a lawsuit with Nevada over child safety issues and faces 140 similar legal cases. Accounts are being suspended for participation in these condo games, with bans accompanied by notes citing violations of content policies. The new Chief Safety Officer, Matt Kaufman, is focusing on improving age verification tools. Community reactions to the bans are mixed, with some players supporting stricter measures while others express concern about potential unintended suspensions.

Tech Optimizer

April 21, 2026

Best Free Antivirus 2026: Keep Your Devices Safe With These Free Tools

Many free antivirus services monetize user attention or data, and caution is advised when selecting these options. Recommended free antivirus tools should be free of ads or spyware. Trustworthy antivirus providers present clear privacy policies detailing data collection and sharing practices. Effective free antivirus tools offer real-time protection, on-demand malware scans, and user-friendly features. While free antivirus software is generally sufficient, paid options provide additional cybersecurity tools. The best free antivirus tools consume less than 5% of system resources, with active scans ideally not exceeding 40% CPU usage. Avast faced backlash for selling customer data to over 100 third parties and was fined million by the FTC in 2024. Kaspersky was banned in the U.S. in 2024 due to concerns about potential intelligence exploitation, and it cannot be recommended at this time.

Tech Optimizer

April 21, 2026

Microsoft Defender: The Gold Standard for 2026 Security

Microsoft asserts that Microsoft Defender Antivirus is sufficient for most Windows 11 users as their sole security solution, following updates to the Windows security framework designed to counteract emerging threats. The current Windows security experience includes features such as real-time protection, cloud-delivered intelligence, smart app control, and cross-platform presence. Microsoft believes that the operating system itself is the most effective guardian of user data, embedding protections directly into the kernel to avoid performance slowdowns associated with external antivirus solutions. Despite this, the cybersecurity sector argues that specialized third-party software remains important, offering features like advanced password management and dedicated identity theft protection that Microsoft Defender lacks. The threat landscape in 2026 is increasingly driven by AI, prompting Microsoft to integrate AI into the Defender engine for proactive threat detection. While Microsoft Defender provides a robust baseline for security, a comprehensive strategy also requires good digital hygiene, strong password policies, and skepticism towards suspicious links.