NewApp Digest
search bot

security measures

Microsoft patches a record 206 flaws—and one is already being exploited
Winsage
June 11, 2026

Microsoft patches a record 206 flaws—and one is already being exploited

Microsoft patched 206 vulnerabilities during June's Patch Tuesday, surpassing the previous record of 175 vulnerabilities patched in October 2025. Among the patched vulnerabilities, 118 are related to different versions of Windows, including Windows 10, Windows 11, and Windows Server. One critical vulnerability, CVE-2026-41091, in Microsoft Defender is actively being exploited, prompting an update to the Malware Protection Engine. Microsoft also addressed ten vulnerabilities in the Security Feature Bypass category due to the expiration of old Secure Boot certificates. Of the 118 Windows vulnerabilities, 19 are classified as critical Remote Code Execution (RCE) vulnerabilities, including CVE-2026-47288 and CVE-2026-47291. In Microsoft Office, 54 vulnerabilities were patched, including 25 RCE vulnerabilities, with nine classified as critical. Microsoft patched eight vulnerabilities in Exchange Server, including CVE-2026-45583, which can be exploited in a man-in-the-middle scenario. Additionally, the update for Edge addressed 74 Chromium vulnerabilities, including a zero-day vulnerability (CVE-2026-11645).
Mortgage Magic launches Secure Portal on Microsoft Windows Store - The Intermediary
Winsage
June 10, 2026

Mortgage Magic launches Secure Portal on Microsoft Windows Store – The Intermediary

Mortgage Magic has launched its Mortgage Magic Secure Portal on the Microsoft Windows Store, designed for intermediary firms and lenders. The portal features bank-grade security, a secure password vault, AI Lender Connect for enhanced collaboration, and an optimized performance architecture to improve broker workflows. It complies with FCA standards and has undergone certification processes for integrity and compliance with Microsoft security standards. Mortgage Magic also holds ISO 27001 certification for information security management and ISO 42001 certification for AI management systems.
‘Tactical radio action’ game Burn-9 announced for PC
AppWizard
June 7, 2026

‘Tactical radio action’ game Burn-9 announced for PC

14 Hours Productions is developing a political spy thriller game titled Burn-9, set to launch for PC on Steam, GOG, and the Humble Store in 2026. Players take on the role of an unseen operator assisting the last survivor of a black-ops team in a chaotic mission. A demo is currently available. The game involves navigating espionage and making pivotal choices based on gathered intelligence while using advanced surveillance systems. Players can disable security measures and extract sensitive information, facing moral complexities and ethical dilemmas throughout the mission.
Microsoft released new Defender update for Windows 11, 10, Server ISO installations
Winsage
June 6, 2026

Microsoft released new Defender update for Windows 11, 10, Server ISO installations

Microsoft is rolling out updates for Windows Defender to protect users from newly discovered malware threats. These updates occur frequently, with a significant refresh every three months for Windows installation images (WIM and VHD) and ISOs. The recent Windows 11 update includes the latest definitions and addresses vulnerabilities from outdated anti-malware definitions in installation images. The latest security definitions were delivered through security intelligence update version 1.445.323.0, applicable to various platforms, including Windows 11 and several Windows Server versions. The update enhances the anti-malware client, engine, and signature versions to platform version 4.18.26040.7, engine version 1.1.26040.8, and security intelligence version 1.447.236.0. The most recent intelligence update is version 1.451.297.0, which improves threat detection against various malware types.
Hackers Use Fake Purchase Orders to Deploy JS.MonoGlyphRAT Targeting US Enterprises
Tech Optimizer
June 6, 2026

Hackers Use Fake Purchase Orders to Deploy JS.MonoGlyphRAT Targeting US Enterprises

Researchers have identified a new malware called JS.MonoGlyphRAT, which disguises itself as business documents to infiltrate corporate networks. It is primarily spread through phishing emails targeting various sectors in the U.S. and has been reported in countries like Germany, Sweden, and Australia. The malware is classified as "Unknown malware" on threat intelligence platforms, making traditional antivirus solutions ineffective. It establishes a persistent presence in the network by executing a JavaScript file and communicating with command-and-control (C2) servers over HTTP. Key indicators of compromise include unusual HTTP traffic, registry changes, and the execution of specific JavaScript files. The malware can download additional payloads and execute commands without leaving traces on disk. Indicators of compromise include specific IP addresses, URLs, file hashes, and registry keys associated with the malware's operation.
Microsoft quietly deletes Windows 11 guide that claimed you don't need third-party antivirus
Tech Optimizer
June 5, 2026

Microsoft quietly deletes Windows 11 guide that claimed you don’t need third-party antivirus

In April 2026, a blog post from Microsoft's Windows Learning Center claimed that most Windows 11 users could rely solely on Windows Security (Defender) for antivirus protection, citing features like Microsoft Defender Antivirus, SmartScreen, and ransomware mitigation. The blog was later removed without explanation, leading to speculation about its definitive claims. Microsoft stated that Windows Defender was sufficient for typical users with default settings and regular updates, while cautioning against using multiple antivirus engines. Independent testing from AV-Test consistently ranks Microsoft Defender highly, but AV-Comparatives noted limitations in offline protection and the reliance on cloud-based intelligence. The blog's removal was viewed by some as a constructive step towards realistic security guidance. Microsoft continues to provide third-party antivirus vendors with significant access to Windows, and the rise of AI-generated threats is complicating the cybersecurity landscape. Despite the controversies, Microsoft has made significant advancements in Windows Security, making it a viable option for many users.
A guide to agentic AI: How Windows is now going to do more things for you
Winsage
June 5, 2026

A guide to agentic AI: How Windows is now going to do more things for you

Microsoft is advancing in the field of artificial intelligence with the introduction of agentic AI, which aims to perform tasks on behalf of users rather than just responding to queries. A key feature is 'autoagents,' starting with Scout, which will integrate into Microsoft 365 applications and autonomously manage tasks like monitoring communications and summarizing documents. Scout is currently being rolled out to select users and is designed with safety measures, including Execution Containers to control resource access and mitigate risks. Additionally, Microsoft has launched Discovery, a tool for enhancing scientific research, and Rayfin, which simplifies application development for individual creators.
A guide to agentic AI: How Windows is going to do more things for you
Winsage
June 4, 2026

A guide to agentic AI: How Windows is going to do more things for you

Microsoft is introducing Scout, its first Autopilot agent designed to enhance productivity within the Microsoft 365 ecosystem by autonomously managing tasks and providing timely notifications. Scout will integrate with applications like Teams, Outlook, OneDrive, and SharePoint, utilizing OpenClaw's open-source technology to manage emails, summarize documents, and allocate time for overdue tasks. To ensure safety, Microsoft has implemented Execution Containers, which define access parameters for agents and integrate with existing security tools like Defender and Intune. Additionally, Microsoft Discovery is now available to all researchers, allowing them to use AI in scientific research with a user-friendly chatbot interface. Microsoft also unveiled Rayfin, a tool that simplifies app development by enabling users to define backend systems through code and deploy them directly to Microsoft Fabric.
Search