security updates Archives

Winsage

October 16, 2026

Faster protection, fewer interruptions: How Microsoft Edge is rethinking updates

Microsoft Edge is developing a seamless-updates prototype that allows security updates to be applied without interrupting users' work. Currently, the browser has a Restart to update on idle feature that applies updates when devices are not in use. The goal is to eliminate the need for users to click an update button, enabling background updates that do not disrupt ongoing tasks. Microsoft Edge can also issue patches independently of the Chromium release schedule for urgent security needs. Additionally, Security Update Alerts help organizations manage updates by notifying administrators about critical updates and vulnerabilities. These alerts are available for managed Windows devices through the Edge management service without additional licensing.

Winsage

October 15, 2026

“674M views and they still don’t get the message”: Windows 10 users still aren’t sold on Windows 11

The most-watched video on Microsoft's official Windows YouTube channel has 674 million views since its release on October 31, 2025, promoting the transition from Windows 10 to Windows 11. This video has 48 times more views than the introductory video for Windows 11, which has around 14 million views. Many users remain attached to Windows 10 due to hardware compatibility issues, as Windows 11 requires TPM 2.0, UEFI with Secure Boot, and a supported 64-bit processor. Concerns about RAM usage in Windows 11, which has been criticized for being a memory hog, and a higher frequency of bugs compared to Windows 10, contribute to users' reluctance to upgrade. Windows 11 has stricter hardware requirements, higher RAM demands, a default Microsoft account requirement for setup, and more visible ads and upsells. Although Windows 11 features a more modern design, many users feel that functionality has been sacrificed. Microsoft has committed to improving Windows 11's performance, reporting that it is now up to 20% more responsive in key areas, and users with 8GB of RAM can manage up to 2GB more active data. However, the perception of Windows 11 remains a challenge due to ongoing complaints about its performance and user experience.

Winsage

October 15, 2026

Microsoft: Windows Server 2022 reached end of mainstream support

Windows Server 2022 has transitioned from mainstream support to extended support, which will last until October 2031. Mainstream support will end on October 13, 2026, with the last security update released in that month. Extended support will continue to provide essential security updates at no additional cost until October 14, 2031. Hotpatching for Windows Server 2022 will be available until October 2027 for Datacenter: Azure Edition. Microsoft recommends upgrading to Windows Server 2025, which will have mainstream support until November 2029 and extended support until November 14, 2034. Windows Server 2025 is set for general availability by November 2024. A free 180-day trial of Windows Server 2025 is available. Additionally, devices running Windows 11 24H2 Home and Pro editions will no longer receive updates, and users are advised to upgrade to Windows 11 26H2 to maintain security. Microsoft warns users of unsupported Windows versions to upgrade to avoid losing access to critical security updates after next year's Windows Update certificate rotation.

Winsage

October 15, 2026

Microsoft: Recent Windows updates may trigger Remote Desktop failures

Microsoft has acknowledged an issue affecting non-admin users connecting to devices via Remote Desktop after recent Windows updates, specifically when the "Administrator protection" feature is enabled. This feature, introduced with the KB5067036 update for Windows 11 versions 24H2 and 25H2 in October 2025, restricts users to standard permissions and requires authentication through Windows Hello for certain actions. Users may encounter connection failures with error code 0xC000000D after applying the KB5124010 September 2026 non-security preview update on systems running Windows 11 versions 24H2, 25H2, 26H1, or 26H2. This issue primarily affects enterprise-managed remote devices configured as Remote Desktop hosts with Administrator protection enabled. Organizations using Windows security baselines have this feature enabled by default unless configured otherwise. A temporary workaround involves disabling Administrator protection, and IT administrators can reset the "User Account Control Type Of Admin Approval Mode" policy using Microsoft Intune or Group Policy. Similar issues have been addressed by Microsoft in the past, including a problem resolved in March 2025 and emergency updates issued last month for Remote Desktop Services failures on Windows Server devices.

Winsage

October 15, 2026

Windows update patches a whopping 1,400 security bugs – including 2 zero days

Microsoft released the October Windows update, addressing over 1,400 vulnerabilities, including 80 critical vulnerabilities and two zero-day exploits. This update is the final supported update for Windows 11 24H2 Home and Pro editions and the first for Windows 11 26H2. Notable enhancements include improvements to File Explorer and refined Bluetooth connectivity. One zero-day vulnerability, CVE-2026-96951, has been exploited in the wild, allowing remote attackers to bypass security protections. The second zero-day, CVE-2026-108398, could enable attackers to circumvent security measures in Microsoft’s .NET Framework. Windows 11 users can install the update via Settings and Windows Update, while Windows 10 users can follow a similar process. Each annual version, such as 24H2, will lose support after 24 months, necessitating an upgrade to Windows 11, version 26H2, for continued security updates. The update also introduces a feature to remap the Copilot key for enhanced user flexibility.

Winsage

October 15, 2026

NVIDIA Freezes Windows 10 GeForce Drivers in October: RTX 40-Series Misses DLSS 5 Support

On October 14, 2026, NVIDIA will release the final GeForce Game Ready Driver for Windows 10, coinciding with the operating system's mainstream end of support. Starting in November 2026, all new Game Ready and Studio Driver releases will only support Windows 11. Approximately 23.56% of Steam gamers were still using Windows 10 as of June 2026. The last Game Ready driver for Windows 10 is version 617.42, released on October 6, 2026. NVIDIA will provide quarterly security updates for Windows 10 GeForce drivers until October 2029, but no new game support or enhancements will be available. Users with RTX 20, 30, 40, and 50 series cards will be affected by this transition, while older models like the GTX 900 and GTX 10 series have already reached their support limits. Windows 10 users will miss out on DLSS 5, which is exclusive to RTX 50-series hardware. Microsoft has extended the free consumer Extended Security Update (ESU) program for Windows 10 to October 12, 2027.

AppWizard

October 15, 2026

Experts warn cheap Android phones are shipping with malware

Cybersecurity experts from Bitdefender have found that budget Android smartphones, such as the Doogee S200 X, Doogee Fire 3 Max, and Cubot KINGKONG X, may come pre-loaded with malware embedded in their firmware, posing significant security risks. This malware is introduced during the manufacturing process, particularly affecting devices with MediaTek chipsets. Thousands of users in around 150 countries, including Mexico, France, Italy, the United States, Germany, Brazil, and Spain, have been impacted. Bitdefender identified a network of 32 malicious applications disguised as legitimate utilities that generate fraudulent ad impressions. Some infected phones can function as residential proxies for criminal activities, including spam campaigns and DDoS attacks. Uninstalling the malicious app may not eliminate the infection if it is integrated into the system software, potentially requiring firmware-level remediation. Buyers of budget phones should research manufacturers' supply chain control and commitment to security updates.

Winsage

October 14, 2026

Microsoft: Windows 11 24H2 Home and Pro reached end of support

Devices operating on the Windows 11 24H2 Home and Pro editions have reached their end of support as of October 13, 2026, meaning they will no longer receive monthly security updates or non-security preview updates. In contrast, the Windows 11 24H2 Enterprise and Education editions will continue to receive mainstream support until October 12, 2027. Microsoft encourages users to transition to Windows 11 26H2, which will be supported until October 2029. The rollout of Windows 11 26H2 is phased and will expand over the next few months. Additionally, systems running Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions will cease to receive security updates in 30 days after the end of support for Windows 11 23H2 Home and Pro editions in November 2025. Windows Server 2022 has also reached the end of its mainstream support but will remain under extended support until October 2031. Users are advised to upgrade unsupported versions of Windows to continue receiving security updates.

Winsage

October 14, 2026

Microsoft Patches Record 1,413 Vulnerabilities, Including Exploited Windows Zero-Day

Microsoft's October 2026 Patch Tuesday updates addressed 1,413 vulnerabilities, including 1,102 in Windows, 134 in Office applications, 61 in developer tools, and 36 related to SharePoint Server. This total surpasses the vulnerabilities fixed by Microsoft in all of 2025, with over 4,000 vulnerabilities resolved in 2026. A critical zero-day vulnerability, CVE-2026-96951, with a CVSS score of 8.8, was also patched; it allows attackers to bypass Windows shell security features. The Cybersecurity and Infrastructure Security Agency (CISA) has included this vulnerability in its Known Exploited Vulnerabilities catalog. Additionally, two publicly disclosed vulnerabilities were patched, and Microsoft introduced 'risk cohorts' to help manage security updates.

Winsage

October 14, 2026

Microsoft’s Record October Patch Tuesday Fixes 1,400+ Flaws As Windows Zero-Day Comes Under Attack

Microsoft's October 2026 security updates address 1,411 vulnerabilities, marking the largest Patch Tuesday release to date. The update includes 70 vulnerabilities classified as Critical, with 57 related to remote code execution, 11 to elevation of privilege, and two to spoofing. Key vulnerabilities include CVE-2026-96951, a Windows Shell security bypass being actively exploited, CVE-2026-108398, which affects .NET Framework and allows bypassing Windows Defender Application Control, and CVE-2026-92707, a denial-of-service vulnerability in MessagePack-CSharp. The release coincides with critical Windows support deadlines, with the final regular update for Windows 11 24H2 Home and Pro and Windows 10 Enterprise LTSB 2016 occurring on October 13. Organizations are advised to prioritize the exploited vulnerabilities, ensure relevant updates are applied, and validate application-control behavior.