security updates

Winsage
May 6, 2026
Since early May 2026, a U.S. company has introduced Hotpatching technology for compatible devices, allowing security updates to be applied without a full system reboot. This technology replaces code fragments directly in the RAM of running processes, reducing the size of downloaded packages and enabling quicker implementation of critical patches. The update mechanism operates on a hybrid schedule with four base months requiring mandatory reboots for cumulative changes and eight hotpatching months focusing on in-memory security fixes. If extensive architectural changes are needed or if the software environment does not meet standards, the system defaults to a standard installation algorithm that requires a reboot. The technology is designed for corporate infrastructures with high operational demands and requires Windows 11 version 24H2 or later, specific editions, and enabled VBS virtualization protection.
Winsage
May 6, 2026
A bundle is available for .99 that includes Windows 11 Pro and a lifetime license for Microsoft Office 2019, significantly reduced from the regular price of 8. This package allows users to upgrade their older PCs from Windows 10 to a supported operating system while eliminating subscription fees for Office applications. Windows 11 Pro offers advanced security features and improved usability, while Office 2019 can be installed on a single device without ongoing costs. Both licenses are tied to one device, making it suitable for enhancing a single machine.
Winsage
May 6, 2026
Beginning in May 2026, Microsoft will introduce Hotpatching as a default feature for compatible systems, allowing security updates to be applied without requiring a restart. Hotpatching updates code directly in the memory of running processes, enabling selective updates without interrupting the entire system. It does not replace monthly security updates but alters their activation process on eligible systems, categorized as security updates within the monthly B releases. Eligible systems must be running Windows 11 version 24H2 or newer and possess suitable licenses such as Enterprise, Education, Microsoft 365, or Windows 365. Management of these updates will be facilitated through Windows Autopatch or Microsoft Intune. Microsoft will continue to utilize baseline updates that require a restart, which will alternate with Hotpatch months. Hotpatching aims to reduce the frequency of restarts tied to security updates, particularly benefiting environments where uptime is critical. However, planned restarts will still be necessary, and robust telemetry and maintenance practices will be needed to ensure smooth operation.
Winsage
May 6, 2026
The April 2026 Steam survey results show that the NVIDIA GeForce RTX 3060 with 8GB of VRAM remains the most common discrete graphics card among users. Approximately 25% of Windows users are utilizing Microsoft's Extended Security Updates (ESU) program as Windows 10 nears its End-of-Life phase. The usage of Linux and macOS has slightly decreased, with Arch Linux identified as the leading distribution for Valve's SteamOS. Despite Microsoft's recommendation for 32GB of RAM, 16GB is still the most prevalent configuration among users.
Winsage
May 5, 2026
Microsoft will include the psmounterex.sys driver in its Vulnerable Driver Blocklist in the April 2026 security update, affecting third-party backup applications that use this driver for image mounting and Volume Shadow Copy Service (VSS) snapshots. This decision addresses CVE-2023-43896, a critical buffer overflow vulnerability. Affected software includes Macrium Reflect, Acronis Cyber Protect Cloud, UrBackup Server, and NinjaOne Backup on Windows 11, Windows 10, and Windows Server platforms. Users may face issues during image-mount operations, receiving error messages related to VSS timeouts and Code Integrity errors in the Event Viewer. To check if a system is affected, users can look for Event ID 3077 in the Code Integrity Operational log. Microsoft recommends upgrading to newer versions of backup applications that do not use blocked drivers and advises against uninstalling or delaying the April update. Additionally, the update may cause certain Windows Server 2025 devices to boot into BitLocker recovery mode and has led to out-of-band updates for Windows Server update failures and restart loops on domain controllers.
Winsage
May 4, 2026
Microsoft has acknowledged that the April 2026 security updates have disrupted the functionality of various third-party backup applications using the psmounterex.sys driver, raising concerns among users. The issue primarily affects software leveraging the Volume Shadow Copy Service (VSS) snapshots, leading to failures due to VSS service timeouts. Notable impacted products include Macrium Reflect, Acronis Cyber Protect Cloud, UrBackup Server, and NinjaOne Backup, used on Windows 11, Windows Server, and Windows 10 devices. Disruptions can manifest as failures to mount backup image files, errors or timeouts when browsing or restoring from backup images, and error messages related to VSS timeouts. Microsoft updated its support documentation to clarify that the April updates included a security hardening change that added psmounterex.sys to the vulnerable driver blocklist to protect against a high-severity buffer overflow vulnerability (CVE-2023-43896). Affected users are advised to upgrade to newer application versions with updated drivers and not to uninstall or pause the security update. Users can check if the Microsoft Vulnerable Driver Blocklist is blocking a driver by looking for Event ID 3077 in the Code Integrity Operational log. Additionally, Microsoft has alerted users that some Windows Server 2025 devices may boot into BitLocker recovery mode after installing the KB5082063 update and has issued out-of-band updates to address installation failures and restart loops affecting Windows Server systems after the April 2026 updates.
Winsage
May 3, 2026
Experts advise against postponing Windows updates, as Microsoft has introduced features allowing users to control when updates occur. Users can pause updates for up to 35 days indefinitely, but delaying updates can lead to security vulnerabilities. Microsoft releases several types of updates: security updates, feature updates, quality updates, driver updates, optional updates, out-of-band updates, and zero-day updates. Zero-day updates are critical and should be installed immediately to avoid exploitation. Recent reports indicate that critical OS patching for Windows 10 and 11 is lagging by an average of 256 days, increasing the risk of cyber incidents.
Winsage
May 2, 2026
Microsoft is enhancing the out-of-the-box experience for Windows 11 users by allowing them to skip updates during initial installation on consumer devices. Users can now pause updates for up to 35 days and re-enable this pause multiple times. Additionally, the shutdown and restart options during update installations have been revamped, allowing users to shut down or restart their devices without triggering the update process. These changes aim to provide users with greater control over their update experience while maintaining security.
Winsage
May 1, 2026
Microsoft resolved an issue affecting the display of security warnings when opening Remote Desktop (.rdp) files across all supported Windows versions, including Windows 11, Windows 10, and Windows Server. This problem was particularly evident on devices with multiple monitors having different display scaling settings. The fix was included in the optional KB5083631 preview cumulative update for Windows 11. The issue arose after the installation of the April 2026 security update, which introduced security warnings to enhance protection against phishing attacks. Users reported misalignment and obscured buttons in the security dialog, making it difficult to interact with. Additionally, the April security updates caused issues with third-party backup applications on Windows 11 systems and led to restart loops and failures during update installations on Windows Server.
Search