security fixes Archives

Winsage

April 13, 2026

Windows 11 no longer forces you to update the OS when setting up your PC

Microsoft has introduced a significant change to the out-of-box setup process for Windows 11, allowing new users to bypass the mandatory update phase that previously extended setup times by as much as 30 minutes. An "update later" button will now appear during setup, enabling users to access their desktops more quickly. This feature has been tested with select user groups and is now available to all users. Additionally, Microsoft is working on further modifications to the Windows Update system, including options to postpone updates indefinitely and reduce required restarts to once a month.

Tech Optimizer

April 12, 2026

Modernizing Nexus Repository: Moving Beyond OrientDB

Support for OrientDB in Sonatype Nexus Repository has been discontinued, and older versions of Nexus Repository (prior to 3.70.5) are built on an outdated architecture that presents high-severity vulnerabilities and cannot be fully patched. The recommended database for Nexus Repository is now PostgreSQL, which offers better performance and support for modern architectures. Users have two migration options: transition to Sonatype Nexus Repository Cloud, which is fully managed and eliminates database management, or migrate to PostgreSQL while maintaining a self-hosted environment, which requires ongoing maintenance and infrastructure ownership.

Winsage

April 5, 2026

Microsoft Ships Emergency Windows 11 Fix for Broken Patch

On March 31, Microsoft released emergency update KB5086672 in response to issues caused by the previous preview patch KB5079391, which left many Windows 11 devices in a loop with error code 0x80073712, blocking access to March security fixes. Microsoft withdrew KB5079391, which was launched on March 26, and replaced it with KB5086672, a cumulative update that includes all fixes from March 2026. KB5086672 supersedes previous updates, including KB5079473, KB5085516, and KB5079391. Users with the "Get the latest updates as soon as they’re available" setting will receive KB5086672 automatically, while others can manually check for updates or download it from the Microsoft Update Catalog. Microsoft has been issuing multiple emergency updates recently, raising concerns about the quality of its update pipeline, with a history of emergency patches for various issues affecting Windows 10, Windows 11, and Windows Server. The issues from KB5079391 may resurface in the upcoming April cumulative update.

Winsage

April 4, 2026

Windows 11’s April update packs 8 (mostly) meaningful improvements you won’t want to skip. Here’s what you’ll be getting.

Microsoft will begin rolling out the April 2026 Security Update for Windows 11 on April 14, 2026. This update includes significant changes such as: 1. Smart App Control (SAC) can now be managed without reinstalling the operating system, allowing users to toggle it on or off via Windows Security. 2. Windows Narrator has been enhanced to generate AI-based image descriptions, available to users on a Microsoft 365 Family plan. 3. The pen settings page will include an option to configure the "Same as Copilot key" feature. 4. File Explorer will receive updates including the ability to use Voice Typing for renaming files and fixes for various bugs. 5. The update supports display refresh rates of 1000Hz or higher, improves auto-rotation functionality, and enhances HDR performance for certain displays.

Winsage

March 22, 2026

Trust But Verify ⭐️

Pavan Davuluri has been appointed as the new leader of Windows development at Microsoft. The company has committed to enhancing the quality of Windows through 2026. Davuluri's recent blog post, primarily directed at Windows Insider Program participants, lacks an apology for past customer grievances and does not address several critical issues, including forced telemetry, bundled software, chaotic updates, forced Microsoft account sign-ins, and the mandatory use of Microsoft Edge. While he mentions plans to improve Windows Update and acknowledges the need for better reliability and transparency in the Windows Insider Program, many concerns remain unaddressed. The introduction of Copilot and its integration into Windows will continue, but users have expressed frustration over its implementation. Davuluri's approach to improving performance through the WinUI3 framework is met with skepticism.

Winsage

March 16, 2026

Windows 11 KB5079473 is not causing BSODs or an inaccessible C: drive and app failures, says Microsoft

The March 2026 Patch Tuesday update, KB5079473, is not causing significant issues like BSODs or reboot loops, according to Microsoft. Reports of an inaccessible C: drive and application malfunctions on Samsung PCs are linked to a recent update of the Galaxy Connect app, not the Windows update. Microsoft confirmed no known connections between the March update and major system failures. The update includes over a dozen security fixes and introduces new features, such as improvements to the File Explorer search bar and a Bing-based Internet speed test tool. Specific Samsung models are experiencing C drive accessibility issues due to the Galaxy Connect app, which has disrupted permissions.

Winsage

March 12, 2026

Windows 10/11 Patch Day March: Microsoft delivers the big security update, but as usual, the real message is in the fine print

In March, Microsoft released cumulative security updates for Windows 10 and Windows 11, with support for certain versions continuing until March 2026. The updates include KB5079466 for Windows 11 version 26H1, KB5079473 for versions 24H2 and 25H2, KB5078883 for version 23H2, and KB5078885 for Windows 10 version 22H2. These updates will be distributed via Windows Update, the Microsoft Update Catalog, and WSUS for enterprise environments. This month, Microsoft combined the Servicing Stack Update (SSU) with the Latest Cumulative Update, simplifying the update process. Key enhancements include improvements to Secure Boot, with expanded device target data for new certificates, and security enhancements for Explorer’s search functionality in Windows 11 versions 24H2 and 25H2. A fix for Windows Defender Application Control (WDAC) was also implemented, addressing issues with COM objects under certain policy configurations. The Windows System Image Manager received a new warning dialog for confirming the trustworthiness of catalog files, which is important for enterprise environments. Updates for Windows 10 22H2, despite its end-of-life status, included fixes for secure boot issues and improvements for file version history in the Control Panel. An SSU for Windows 11 (KB5077869) was also released to maintain update stability. Microsoft's updates scheduled for March 2026 will address vulnerabilities in components like the Windows App Installer, SQL Server, and Microsoft Office. The Security Update Guide provides detailed information on specific vulnerabilities and affected components.

Winsage

March 11, 2026

Microsoft to enable Windows hotpatch security updates by default

Microsoft will enable hotpatch security updates by default for eligible Windows devices managed through Microsoft Intune and the Microsoft Graph API starting with the May 2026 Windows security update. This change aims to enhance security and reduce the time to achieve 90% patch compliance by half. The updates will be managed through Windows Autopatch, which allows organizations to apply updates without manual intervention. Administrators can manage hotpatch updates at the tenant level and can opt-out starting April 1, 2026. A Hotpatch quality updates report will be available in Intune to ensure devices are ready for the updates. Windows Autopatch became generally available in July 2022 and is currently operational on over 10 million production devices.

Winsage

March 11, 2026

Microsoft flips Windows Autopatch to default hotpatch security updates

Microsoft will automatically enable hotpatch security updates for Windows devices managed through Microsoft Intune or the Microsoft Graph API starting with the May 2026 Windows security update. This feature allows security fixes to be applied without requiring a device restart, improving compliance efficiency. Devices that install the April 2026 baseline security update will begin receiving hotpatch updates in May 2026, but this will only apply to devices not already assigned to a quality update policy. Organizations can opt out of hotpatch updates for specific device groups or their entire tenant starting April 1, 2026.

Winsage

March 6, 2026

Windows 11 is making big changes to printing, because printers are awful

Microsoft is transitioning to a universal printer driver system to address issues related to legacy printer drivers in Windows. Starting with Windows 10 version 21H2, a universal printer driver compatible with Mopria standards has been integrated and is being enhanced through updates. A phased approach to legacy printer drivers will begin in January 2026, when Windows Update will stop allowing new legacy drivers for Windows 11 and Windows Server 2005. Existing drivers for older printers will continue to function. In July 2026, Windows 11 will prioritize the universal driver over legacy drivers, and by July 2027, updates for legacy drivers will be limited to security fixes. There is no set timeline for the complete discontinuation of old printers and their drivers.