security updates

Winsage
May 19, 2025
Computers have a finite lifespan, and companies like Microsoft withdraw support for older devices to focus on newer models, a practice known as planned obsolescence. Microsoft is discontinuing support for the Windows 10 operating system, which means users will no longer receive security updates or technical assistance. Google has developed ChromeOS Flex, an operating system that can be installed on older Windows 10 devices, providing essential security features and updates. ChromeOS Flex offers rapid boot times and automatic updates and is compatible with a range of hardware from major manufacturers. Users must verify their device against an approved list and meet specific installation requirements, including having a 64-bit processor, at least 4 GB of RAM, and 16 GB of storage. An empty USB drive of at least 8 GB is needed to create the bootable installer for the installation process.
Winsage
May 17, 2025
In this week's roundup of applications for Windows 10 and 11, it is noted that consumer support for Windows 10 will end in October 2025, but users can purchase a year of extended support and receive three years of security updates for Microsoft 365 apps. New applications highlighted include: - DiskCopy: Free disk and partition cloning software for backing up partitions or entire disks, facilitating data migration. - IrfanView: An image viewer that now includes batch file multithreading and new hotkeys in its latest version. - Registry Finder: A freeware tool for managing the Windows Registry, with improved search capabilities and usability.
Winsage
May 16, 2025
Microsoft addressed issues with dual-boot installations involving Linux that were caused by updates released in August, which disrupted many configurations and Linux boot media. The updates aimed to enhance security by blocking outdated boot managers but resulted in error messages indicating a security policy violation. To resolve these issues, Microsoft created the Secure Boot Advanced Targeting (SBAT) update to prevent installation on dual-boot systems, but the detection mechanism was often ineffective. The SBAT update was paused in September, and Microsoft announced that the problem was resolved with security updates released in May. Affected Windows versions include Windows Server editions from 2012 to 2022, Windows 11 (versions 23H2, 22H2, and 21H2), and Windows 10 (versions 22H2, 21H2, and Enterprise 2015 LTSB). Microsoft also provided guidance for users to prevent the SBAT update and steps to restore dual-boot systems.
Winsage
May 16, 2025
Users are experiencing BitLocker Recovery screens and Blue Screens of Death (BSOD) after installing the Windows 10 update KB5058379. This mandatory update addresses significant security vulnerabilities, but Microsoft claims to be unaware of any new issues. Some users have found that disabling Intel TXT can help complete the installation. Reports include a user experiencing consistent BSODs after the update and another who resolved boot issues by changing BIOS settings. The end of support for Windows 10 is approaching on October 14, but Microsoft 365 applications will still receive security updates afterward. Windows 11 users are not affected by these issues.
Winsage
May 16, 2025
The Windows 10 KB5058379 cumulative update, released on May 13, 2025, has caused unexpected BitLocker recovery prompts for some users after installation and reboot. Reports indicate that affected devices, including those from Lenovo, Dell, and HP, automatically boot into the Windows Recovery Environment and display the BitLocker recovery screen. Users have experienced various issues, such as needing BitLocker keys to start up or devices refusing to start. A workaround involves disabling Intel Trusted Execution Technology (TXT) in the BIOS. Microsoft has not publicly acknowledged the issue but support representatives are aware and working on a resolution. Microsoft has provided steps to resolve the issue, including disabling Secure Boot and virtualization technologies, checking Microsoft Defender System Guard Firmware Protection status, and disabling firmware protection via Group Policy or Registry Editor.
Winsage
May 15, 2025
Microsoft's May 2025 Patch Tuesday addressed 72 vulnerabilities in Windows Remote Desktop services, including two critical vulnerabilities, CVE-2025-29966 and CVE-2025-29967, which are heap-based buffer overflow issues. These flaws allow unauthorized attackers to execute arbitrary code over a network, posing significant risks. The vulnerabilities have been rated as "Critical" and classified under CWE-122. They affect various versions of Windows operating systems utilizing Remote Desktop services. Although there have been no reported active exploitations, experts warn of the potential dangers, urging users to apply patches immediately. The update also addressed five actively exploited zero-day vulnerabilities in other Windows components. Patches are available through Windows Update, WSUS, and the Microsoft Update Catalog.
Winsage
May 15, 2025
The Microsoft Security Response Center (MSRC) has released critical security updates to address a significant vulnerability in the Windows Remote Desktop Gateway service, identified as CVE-2025-26677, which allows unauthorized attackers to cause denial of service (DoS) conditions. This vulnerability is rated as "High" severity with a CVSS score of 7.5 and affects multiple versions of Windows Server, including 2016, 2019, 2022, and 2025. Microsoft has provided security updates (KB5058383, KB5058392, KB5058385, and KB5058411) to rectify the issue. Additionally, another vulnerability, CVE-2025-29831, has been identified that could enable remote code execution (RCE) through a Use After Free weakness, also rated with a CVSS score of 7.5. This vulnerability requires user interaction, specifically an admin user to stop or restart the service, and affects Windows Server versions 2008 R2, 2012/R2, 2016, 2019, 2022, and 2025. Organizations are advised to prioritize patching both vulnerabilities and to review network configurations to limit exposure of Remote Desktop Gateway services. The vulnerabilities were discovered by security researchers from Kunlun Lab.
Winsage
May 15, 2025
Microsoft will continue to provide security updates for Microsoft 365 applications, including PowerPoint, Word, and Excel, on Windows 10 until October 10, 2028, despite the end of official support for Windows 10 on October 14, 2025. A misleading blog post suggesting that Microsoft 365 Apps would cease support on Windows 10 after the 2025 deadline was clarified by a Microsoft spokesperson as not being an official announcement. Extended Security Updates (ESU) are now available to individual consumers, previously limited to commercial clients and educational institutions. Users can purchase ESU, consider third-party security patches, or transition to Linux if they wish to move away from Microsoft’s ecosystem. Additionally, Microsoft recently announced layoffs of 7,000 employees.
Search