NewApp Digest
search bot

security improvements

Windows 10/11 Patch Day March: Microsoft delivers the big security update, but as usual, the real message is in the fine print
Winsage
March 12, 2026

Windows 10/11 Patch Day March: Microsoft delivers the big security update, but as usual, the real message is in the fine print

In March, Microsoft released cumulative security updates for Windows 10 and Windows 11, with support for certain versions continuing until March 2026. The updates include KB5079466 for Windows 11 version 26H1, KB5079473 for versions 24H2 and 25H2, KB5078883 for version 23H2, and KB5078885 for Windows 10 version 22H2. These updates will be distributed via Windows Update, the Microsoft Update Catalog, and WSUS for enterprise environments. This month, Microsoft combined the Servicing Stack Update (SSU) with the Latest Cumulative Update, simplifying the update process. Key enhancements include improvements to Secure Boot, with expanded device target data for new certificates, and security enhancements for Explorer’s search functionality in Windows 11 versions 24H2 and 25H2. A fix for Windows Defender Application Control (WDAC) was also implemented, addressing issues with COM objects under certain policy configurations. The Windows System Image Manager received a new warning dialog for confirming the trustworthiness of catalog files, which is important for enterprise environments. Updates for Windows 10 22H2, despite its end-of-life status, included fixes for secure boot issues and improvements for file version history in the Control Panel. An SSU for Windows 11 (KB5077869) was also released to maintain update stability. Microsoft's updates scheduled for March 2026 will address vulnerabilities in components like the Windows App Installer, SQL Server, and Microsoft Office. The Security Update Guide provides detailed information on specific vulnerabilities and affected components.
Microsoft testing Windows 11 batch file security improvements
Winsage
February 28, 2026

Microsoft testing Windows 11 batch file security improvements

Microsoft has released new Windows 11 Insider Preview builds that enhance security and performance for batch files and CMD scripts. IT administrators can now activate a secure processing mode by adding the LockBatchFilesInUse registry value, which prevents modifications to batch files while they are running. This update also requires signature validation only once per batch file, improving performance. Additionally, the Shared Audio feature has been refined, allowing users to share audio across multiple devices with individual volume sliders and a new taskbar indicator. The feature now supports more Bluetooth LE Audio accessories, including Samsung Galaxy Buds 4, Sony WF-1000XM6, and Xbox Wireless Headset. These updates are available for Windows Insiders in the Beta and Dev channels with specific preview builds installed.
Aurora PostgreSQL 13 Deadline: Four Upgrade Paths to Beat February Cutoff
Tech Optimizer
January 29, 2026

Aurora PostgreSQL 13 Deadline: Four Upgrade Paths to Beat February Cutoff

Standard support for Amazon Aurora PostgreSQL-Compatible Edition and Amazon RDS for PostgreSQL version 13 will end on February 28, 2026. PostgreSQL 13 will be deprecated by the community in November 2025, ceasing to receive bug fixes or security patches. AWS recommends upgrading to newer versions, such as 16 or 17, which offer significant performance enhancements and improved security. PostgreSQL 17 can achieve up to twice the write throughput and consumes 20 times less memory during vacuum operations. Version 16 introduces pg_stat_io for detailed I/O statistics, while version 14 includes a vacuum emergency mode. Aurora-specific enhancements in version 14.9 and later can lead to faster query latency and reduced costs. Version 14 introduces new roles for access control, and version 15 revokes certain permissions. Major upgrades in logical replication include automatic slot synchronization in version 17 and support for parallel apply in version 16. Transitioning between major versions requires careful examination of catalog changes, as some views and configuration parameters will evolve. Extensions must be verified, as most do not auto-upgrade. An in-place major version upgrade can be performed via the AWS Console or CLI, with downtime varying based on database size. AWS recommends snapshot-based testing beforehand. The CLI command can check valid upgrade targets, leading from version 13 to 14, 15, 16, or 17. Preparation involves validating instance classes and dropping replication slots. Amazon RDS Blue/Green deployments allow for near-zero downtime by synchronizing production with a staging environment, enabling application testing before traffic switching. This feature is supported from Aurora PostgreSQL version 13.12 onward. Logical replication through pglogical offers flexibility for minimal downtime, while AWS DMS supports homogeneous migration with Change Data Capture. Extended Support is available for a fee, providing up to three years of security patches. Best practices include replicating production environments in staging, conducting load tests, and validating queries against new catalogs. Recent minor releases, including Aurora PostgreSQL 17.6 and 16.10, showcase ongoing improvements. Engaging AWS Support is advisable for complex setups to ensure seamless transitions before the deadline.
Microsoft’s biggest Windows bug is user confidence
Winsage
January 26, 2026

Microsoft’s biggest Windows bug is user confidence

Windows 11 is recognized for its speed, stability, and security improvements over Windows 10, but users express frustration with certain changes, particularly regarding the TaskBar. There is a growing discontent among users due to decisions made by Microsoft that make them feel marginalized, such as changes to the taskbar and Start menu, the introduction of ads in core areas, and confusing telemetry settings. Users desire clarity, consistency, and control, seeking transparency about changes, the removal of ads, straightforward privacy settings, and opt-in AI features. They want the Insider Program to become a collaborative partnership rather than just a bug-reporting channel. A proposed solution is a "Windows Social Contract," which would include commitments to no ads in the core system UI, no forced feature rollouts, clear privacy controls, transparent communication about changes, a meaningful feedback loop, and user choice in AI integrations. The relationship between Microsoft and its users is currently strained, and rebuilding trust is essential for user satisfaction.
Windows 11 26H1 Focuses on New Silicon Support, Not New Features
Winsage
November 10, 2025

Windows 11 26H1 Focuses on New Silicon Support, Not New Features

Microsoft has released Windows 11 Insider Preview Build 28000, focusing on hardware optimization rather than major user interface changes. This build supports advanced silicon from Qualcomm and NVIDIA, specifically targeting Windows-on-Arm platforms featuring Snapdragon X2 Elite processors and NVIDIA's N1 and N1x SoCs. The 26H1 update will not be a feature update for version 25H2 but will include platform modifications for new hardware, with no action required from users. Microsoft plans to use an enablement package (eKB) to unlock functionalities within the 26H1 framework, similar to the 25H2 update, which also introduced few new features and emphasized security improvements while deprecating certain features like PowerShell 2.0 and WMIC due to security vulnerabilities. Additionally, IT administrators can remove pre-installed Microsoft default applications on Enterprise and EDU devices through Group Policy or MDM CSP.
Microsoft October Patch Tuesday for Windows 11 Fixes 175 Flaws
Winsage
October 14, 2025

Microsoft October Patch Tuesday for Windows 11 Fixes 175 Flaws

Microsoft's October 2025 Patch Tuesday addressed 175 vulnerabilities, including two zero-day elevation-of-privilege flaws: CVE-2025-24990, related to the legacy ltmdm64.sys Agere Modem driver, and CVE-2025-59230, affecting the Remote Access Connection Manager. Five vulnerabilities were classified as critical, including CVE-2025-59246 (remote code execution in Azure Entra ID), CVE-2025-55315 (ASP.NET Core vulnerability), CVE-2025-49708 (Microsoft Graphics Component bug), CVE-2025-59287 (Windows Server Update Service flaw), and CVE-2025-59228 (SharePoint vulnerability). The update (KB5066835) also resolved usability issues, such as print preview hangs and input detection failures. Microsoft notified administrators about the expiration of Secure Boot certificates in June 2026. Windows 11 users can install the update via Settings > Windows Update, requiring a system restart and data backup before installation.
Search