Security update Archives

Tech Optimizer

September 19, 2026

Windows 11’s Defender kept falsely saying your antivirus was off, and Microsoft just fixed it

For nearly two months, Windows 11 users received persistent notifications from the Windows Security app falsely indicating that Microsoft Defender was disabled, despite it functioning properly. This issue, which began in early August, has been addressed with a security update from Microsoft. The false alerts affected all versions of Windows 11, Windows Server, and Windows 10, and were linked to a bug introduced with a recent Defender security update. Microsoft confirmed that no manual action is required from users to resolve the issue, as the fix will be automatically deployed to all PCs with mandatory security updates enabled. The problem was resolved in the Microsoft Defender Antivirus update (version 4.18.26080.4), released on September 17, 2026. Users can verify the status of Defender by checking Windows Security or using a PowerShell command.

Winsage

September 19, 2026

These 4 built-in Windows tools helped me build a self-healing PC

Windows operating systems include built-in tools for maintaining PCs, allowing users to monitor system health, repair corrupted files, and recover from boot failures with minimal intervention. Task Scheduler automates maintenance tasks by triggering them based on schedules or events, accessible via the Start menu or taskschd.msc. It can activate tasks at fixed intervals, on startup, during idle periods, or in response to Event Viewer entries. Tasks should run with the highest privileges and can be configured to execute regardless of user sign-in status. The Settings tab allows missed tasks to run as soon as possible. DISM (Deployment Image Servicing and Management) is a command-line utility that repairs the component store, essential for installing updates and restoring system files. It offers three inspection levels: CheckHealth, ScanHealth, and RestoreHealth, with the latter requiring an internet connection for downloading replacement files. DISM logs operations in C:WindowsLogsDISMdism.log. SFC (System File Checker) verifies and repairs core operating system files using Windows Resource Protection. The command sfc /scannow checks all protected files, while /verifyonly provides a report without changes. SFC's effectiveness depends on the integrity of the component store, making it essential to run DISM first. Results are logged in C:WindowsLogsCBSCBS.log. Quick Machine Recovery (QMR), introduced in Windows 11, addresses boot failures by connecting to the internet to find solutions when repeated boot failures are detected. QMR is enabled by default on unmanaged devices and can continuously check for fixes. It is designed to respond to widespread issues rather than unique problems and may not work effectively on older hardware or without a network connection. Together, these tools provide a comprehensive approach to system maintenance in Windows 11, ensuring the operating system remains healthy and efficient without additional software.

Winsage

September 18, 2026

Windows 11 Update Can Break Active Directory Trust Relationships

A recent security update from Microsoft, KB5124008, has caused disruptions for organizations using on-premises Active Directory, particularly affecting domain-joined Windows 11 devices with Credential Guard. After installing this update, some devices lost their secure trust relationship with the domain, preventing users from logging in with valid credentials. The issue is linked to Machine Identity Isolation, a security feature that enhances machine account credential protection but requires domain controllers to operate at the Windows Server 2025 Domain Functional Level. Organizations that enabled this feature without meeting the prerequisite may experience trust relationship failures. Microsoft has suggested a workaround to disable Machine Identity Isolation and plans to suspend its enforcement in an upcoming update while improvements are made.

Winsage

September 17, 2026

Microsoft patch gives domain-joined Windows PCs trust issues

Microsoft acknowledged a significant issue affecting Windows 11 versions 24H2, 25H2, and 26H1 related to Active Directory domain logins as of September 16. This issue stems from changes made to Machine Identity Isolation in the September 2026 security update (KB5124008), which may cause Credential Guard-protected machine accounts to lose their secure channel with an on-premises Active Directory domain, preventing users from signing in with valid domain credentials. The update activates Machine Identity Isolation but does not enforce it immediately, and it is only compatible with environments linked to domain controllers operating at the Windows Server 2025 Domain Functional Level (DFL) or higher. Microsoft advised that devices not connected to Windows Server 2025 domain controllers will need to disable Machine Identity Isolation. A workaround involves disabling the feature through Intune, Group Policy, or the Windows Registry, followed by a device restart and repairing the secure channel using the Test-ComputerSecureChannel PowerShell command. Microsoft plans to address this issue in a future update by temporarily halting Machine Identity Isolation enforcement while enhancements are made.

Winsage

September 16, 2026

Windows 11 out-of-band update fixes audio glitch and other bugs – grab it now

Microsoft released an out-of-band patch on Monday to resolve an audio issue affecting Windows 11 users on versions 26H2, 25H2, and 24H2. The patch addresses a glitch that caused no audio output, unresponsive sound settings, and error messages in Device Manager related to USB-connected devices using the USB Audio Class 1.0 standard. This issue originated from a September 8 security update. The patch also fixes several security vulnerabilities, including CVE-2026-62721 and CVE-2026-85921, and resolves bugs in Microsoft’s Remote Desktop Services and Hyper-V platform. Users can install the update through Windows Update, with specific update labels for each version.

Winsage

September 14, 2026

Microsoft’s latest Windows 11 update breaks audio on some PCs, but there is a workaround

Microsoft's September security update for Windows 11, KB5124008, is causing audio issues with USB audio devices, including unresponsive sound controls and lack of audio output. The problems are linked to USB Audio Class 1.0 devices and do not affect built-in motherboard audio codecs or wireless headsets. Users may see an error message “This device cannot start (Code 10)” in Device Manager logs. Microsoft is working on a fix, and users can temporarily switch to stereo settings for relief. Additionally, the update is causing gameplay disruptions, crashes, and other bugs, prompting users to report issues to Microsoft and consider pausing updates.

Winsage

September 14, 2026

Microsoft patches Windows and Excel – breaks audio, remote access, and paste

Microsoft's recent security updates have caused disruptions in several areas: 1. Remote Desktop Services (RDS): Users on Windows 11 26H1 and Windows Server 2012 are experiencing connectivity issues, including failed connections, freezing servers, and unresponsive tools like Microsoft Management Console (MMC). A temporary solution involves restarting the virtual machine, and Microsoft is working on a fix. 2. USB Audio Devices: Problems have been reported with USB Audio Class 1.0 devices on Windows 11 26H1, 25H2, and 24H2, leading to audio issues. A workaround includes switching to two-channel mode, and Microsoft is addressing the situation. 3. Excel Functionality: A fix for vulnerabilities in Excel has disrupted the paste operation across versions 2016, 2019, 2021, and 2024, leaving users unable to paste content correctly. Some users have resolved the issue by uninstalling and reinstalling Office or using commands to remove the security update, though this also removes the associated security fixes.

Winsage

September 14, 2026

September Patch Tuesday: 963 CVEs, 2 exploited flaws, 1 message

Microsoft has addressed 24 Common Vulnerabilities and Exposures (CVEs) in its developer tooling, with 23 classified as important and one as critical. The critical entry, CVE-2026-34182, has a CVSS score of 9.1 and affects CMS AuthEnvelopedData processing in Visual Studio versions 2017 to 2022. The highest-scoring entry is CVE-2026-81376, a security feature bypass in Visual Studio Code, with a CVSS score of 9.6. Visual Studio Code and its Copilot extensions account for ten of the CVEs, primarily related to security feature bypasses. The .NET framework has updates for SDK versions 8.0.131, 8.0.425, 9.0.121, 9.0.318, 10.0.112, and 10.0.401. Monthly rollups for the .NET Framework have been released for various operating systems, including Windows Server 2012 and Windows 10 versions. Adobe has released 963 CVEs, with 55 flagged by Microsoft as high risk, primarily in printing and fonts.

Winsage

September 14, 2026

Windows 11 September Update Kills Audio Output on Some PCs

Microsoft has acknowledged an issue with audio output for some Windows 11 users following the September security update KB5124008, which has affected USB audio devices. Users may encounter error messages like "This device cannot start (Code 10)" in the device manager, with symptoms including unresponsive volume controls, absence of audio output, and devices not appearing in the device manager. The issue is limited to USB Audio Class 1.0 devices. A workaround involves reverting to a 2-channel audio mode, which may restore functionality for some devices. Microsoft is working on a permanent fix. Previous updates have also caused issues, such as resetting custom cursors and impacting gameplay with crashes and freezes. A poll indicated that many users believe the quality of Windows 11 is deteriorating.

Winsage

September 10, 2026

Microsoft says September updates fix mouse settings reset issues

Microsoft acknowledged an issue with the KB5120998 August 2026 preview update for Windows 11, where mouse settings related to cursor personalization were altered or reset. This problem affected non-English Windows installations, causing personalized settings to fail to load and revert to standard configurations. The issue was resolved in the subsequent KB5124008 September 2026 cumulative update, which users were encouraged to install. KB5120998 was an optional update, potentially limiting the number of affected users. Additionally, Microsoft has been addressing various mouse-related issues in recent months, including problems with the Windows Recovery Environment and disappearing mouse pointers in Outlook.