security patches Archives

Winsage

October 1, 2026

Windows 10 Users Face a $30 Choice as Microsoft Quietly Extends Security Support to 2027

Microsoft has extended the support cutoff for Windows 10 from October 13, 2026, to October 12, 2027, due to a one-year extension of the consumer security program. Devices enrolled in the Extended Security Updates (ESU) program will continue to receive updates automatically. Unenrolled devices can still enroll until October 12, 2027, to receive critical updates released since their support ended on October 14, 2025. Users in the European Economic Area can access ESU at no extra cost but must maintain a Microsoft account to avoid losing access to updates after 60 days. To qualify for ESU, devices must run Windows 10 version 22H2 in supported editions, have the latest updates, and meet specific criteria. Microsoft 365 Apps and OneDrive on Windows 10 will receive updates beyond ESU, but the operating system itself remains unprotected without ESU. As of August 2026, 25.15 percent of Windows desktops in Germany were still using Windows 10. Users can check their ESU status under Settings, Update & Security, Windows Update.

Winsage

September 30, 2026

Microsoft Releases the Windows 11 2026 Update, Version 26H2, as a Small Enablement Package

Microsoft has unveiled the Windows 11 2026 Update, version 26H2, on September 29, 2023, accessible for eligible devices running Windows 11 versions 24H2 or 25H2. The update is a controlled feature rollout and is delivered as an enablement package, activating features already embedded in the system. It consolidates improvements, security patches, and enhancements from the past year, with some features previously disabled in 25H2 now enabled by default in 26H2. Installing 26H2 resets the support lifecycle, providing 24 months of support for Home and Pro editions and 36 months for Enterprise and Education editions. Users can manually request the update through Windows Update settings. Organizations can deploy 26H2 via Windows Autopatch and other management tools, with targeted deployments recommended first. Devices that shipped with Windows 11 version 26H1 cannot upgrade to 26H2 and will receive a future upgrade path instead. Microsoft may also implement safeguard holds on devices with known compatibility issues.

AppWizard

September 30, 2026

Sanctioned Russian firm identifies multiple security vulnerabilities in Android and Apple devices

Russian cybersecurity firm Positive Technologies has identified 11 security vulnerabilities affecting Android and Apple devices, with nine related to Apple and two to Android, classified as high severity. The Android vulnerabilities include one that allows attackers to exploit an NFC tag to execute an app without owner approval and another that lets installed apps modify network settings without additional permissions. Google has addressed these issues in its September 2026 security patches. For Apple, vulnerabilities include a macOS flaw that allows malicious apps to gain the highest system privileges and another that exposes sensitive information. Apple has released patches for these vulnerabilities, but specific OS versions affected have not been disclosed. Users are advised to ensure their devices have the latest security updates to mitigate risks.

Winsage

September 25, 2026

Windows 11 24H2 Home and Pro editions reach end of updates on October 13, 2026 — here’s what you must do

Microsoft announced that the Home and Pro editions of Windows 11 version 24H2 will stop receiving updates after October 13, 2026. The Enterprise and Education editions of Windows 11 24H2 will continue to be supported until October 12, 2027. Windows 11 SE will also reach its end of support in October 2026, with no feature updates after 24H2. Users are encouraged to upgrade to Windows 11 version 25H2 to extend their support window until October 2027. The upgrade requires Windows 11 version 24H2 and a specific cumulative update. If users do not upgrade, Microsoft will automatically push the 25H2 update to unmanaged Home and Pro devices.

AppWizard

September 24, 2026

GrapheneOS just confirmed its first supported non-Pixel phone

GrapheneOS has announced that the Motorola Signature 27 will be its first supported device from Motorola. This decision was confirmed on social media, with GrapheneOS stating it would be the initial supported phone. The Signature 27 features Qualcomm’s Snapdragon 8 Elite Extreme Gen 6 chip and promises seven years of operating system and security updates. Key features include hardware memory tagging and enhanced secure-element integration. GrapheneOS aims to provide alternatives to Google’s Pixel phones while focusing on privacy and security. The announcement follows challenges GrapheneOS faced with Google regarding the Pixel 11 and access to certain Android APIs. Additionally, GrapheneOS is revamping its software ecosystem, including updates to its Messaging app and new privacy features.

Winsage

September 22, 2026

Microsoft is set to revamp the design of outdated dialogue boxes in Windows 11

Microsoft is modernizing the user experience in Windows 11 by redesigning all legacy dialog boxes in response to user feedback. March Rogers, Microsoft's design director, is leading this initiative to ensure consistency across the platform. Specific examples of outdated interfaces include the Speech settings dialog and the Windows recovery menu. Microsoft is using two strategies for updates: incremental updates, which introduce a dark theme across system dialogs, and comprehensive redesigns using the WinUI 3 framework. The Run menu has been completely revamped with a dark theme and improved features, while the previous version remains available for user preference. These updates are currently in test builds of Windows 11. Additionally, Microsoft is rolling out security patches and an emergency patch for issues from the September update.

BetaBeacon

September 20, 2026

MuMu Player vs GameLoop vs KOPLAYER: Android 15 Gap

Android emulators for PC have become a crowded market with close to a dozen actively maintained clients. Tencent and NetEase have first-party products like GameLoop and MuMu Player to control the PC on-ramp to their mobile catalogs. Independent players like BlueStacks and LDPlayer focus on platform-agnostic performance and feature breadth. KOPLAYER appears to be abandoned in 2026 with no updates, functioning website, or active development. MuMu Player supports Android 15, offering newer features for mobile games. GameLoop is focused on Tencent's mobile titles with updated documentation. MuMu Player and GameLoop are free, while KOPLAYER is also historically free. MuMu Player and GameLoop have ongoing updates and security, while KOPLAYER's lack of updates poses a security risk.

AppWizard

September 18, 2026

GrapheneOS Isn’t Happy With Google Over Pixel’s Widening Head Start

Google's September 2026 Pixel Update Bulletin includes patches that affect standard Android platform code, relevant to both Pixel and non-Pixel devices, which have not been included in the regular monthly Android Security Bulletin. GrapheneOS has noted that Android 17 QPR1 introduced new developer APIs not present in the Android Open Source Project (AOSP) for the first time since Android Honeycomb, with one new package and modifications to sixteen others. GrapheneOS is backporting Pixel firmware and drivers from QPR1 onto Android 17 but lacks permissions to distribute this work. Additionally, there has been a delay in Google’s compliance with a GPL source request, with access granted over two weeks after the initial request. Starting in 2027, Google will require all Android app developers to register with them and provide legal identification and signing key evidence, complicating the process of sideloading unverified apps. GrapheneOS and other organizations are advocating for the Keep Android Open campaign against these developments, which may restrict competition and tighten Google's control over the Android ecosystem.

AppWizard

September 18, 2026

Android apps can now check security patches down to individual device components

The new AndroidX Security State libraries, with stable releases of Security State v1.1.0 and Security State Provider v1.0.0, allow developers to evaluate the security status of individual device components. They provide three levels of security patch information: Device Security Patch Level (DSPL), Published Security Patch Level (PSPL), and Available Security Patch Level (ASPL). These libraries enable checks on critical components of the Android operating system, including system modules and the Linux kernel, which are represented by version numbers rather than monthly patch dates. Applications that prioritize security can utilize this detailed patch information to assess vulnerabilities, particularly those tracked as Common Vulnerabilities and Exposures (CVEs). The libraries also integrate with the Open Source Vulnerabilities (OSV) database for access to Android Security Bulletin data and device-specific vulnerability reports. Additionally, Android 17 allows manufacturers to declare individual security fixes beyond the stated security patch level, and Google is working with manufacturers to transition their OTA update clients to this new standardized system.

Winsage

September 8, 2026

Patch Tuesday is here — Windows 11 is expected to set yet another record for security updates in a month

Windows 11's latest Patch Tuesday delivered over 650 security fixes, a six-fold increase compared to typical monthly updates. This surge is linked to advancements in artificial intelligence, which have accelerated vulnerability discovery and the urgency to address them. AI aids Microsoft's engineers in the patching process but is also exploited by malicious actors, creating an ongoing cybersecurity arms race.