security updates Archives

Winsage

August 18, 2026

CISA: Windows Task Host flaw now exploited by ransomware gangs

The U.S. Cybersecurity and Infrastructure Security Agency (CISA) confirmed that ransomware gangs are exploiting a significant vulnerability in the Windows Task Host system, tracked as CVE-2025-60710. This high-severity flaw, affecting Windows 11 and Windows Server 2025, allows local attackers with basic user permissions to escalate their privileges to SYSTEM level. Microsoft patched this vulnerability in November 2025, but it poses a threat to unpatched devices. CISA added CVE-2025-60710 to its list of actively exploited vulnerabilities on April 13 and provided Federal Civilian Executive Branch agencies with a two-week window to secure their systems. CISA warns that such vulnerabilities are frequent attack vectors for malicious actors and urges organizations to apply mitigations or discontinue the use of affected products. Additionally, CISA noted that ransomware groups are also exploiting a Microsoft SharePoint remote code execution vulnerability (CVE-2026-45659), confirmed to be actively exploited in early July. Since November 2021, CISA has identified 383 actively exploited vulnerabilities across various Microsoft products, with 112 being used in ransomware attacks.

Winsage

August 17, 2026

Windows Server 2022 reaches end of mainstream support in 60 days

Microsoft has announced that the mainstream end date for Windows Server 2022 is set for October 13, 2026, after which it will enter extended support until October 14, 2031. Windows Server 2022 became generally available in September 2021 and is part of the Long-Term Servicing Channel (LTSC) offering, which guarantees a decade of support. Microsoft recommends upgrading to Windows Server 2025, which will be generally available in November 2024, and will reach its end of support on November 13, 2029, with five years of extended support until November 14, 2034. A free 180-day trial of Windows Server 2025 is available. Additionally, hotpatching for Windows Server 2022 will be extended until October 2027 for Datacenter: Azure Edition systems. The free Windows 10 Extended Security Updates (ESU) program has been extended by an additional year, and Windows 11 23H2 Enterprise and Education editions will end updates on November 10, 2026, with a recommendation to upgrade to Windows 11 25H2.

Tech Optimizer

August 17, 2026

Do you really need antivirus software on your Android phone? – Innovation Village

The landscape of mobile security has shifted away from traditional third-party antivirus software, as modern Android devices are equipped with built-in security features. Key components of this security framework include Google Play Protect, which blocked 27 million malicious apps in 2025; application sandboxing that isolates apps; proactive permissions that enhance user privacy; AI-powered threat detection for sophisticated attacks; and strict sideloading policies to limit risks from off-market malware. Despite these defenses, threats such as social engineering, phishing, malicious push notifications, and unsecured public Wi-Fi remain prevalent, often evading traditional antivirus solutions. However, certain scenarios, such as frequent sideloading, using older devices, connecting to public Wi-Fi, or suspected infections, may warrant the use of third-party antivirus apps for additional protection. Overall, the built-in security features of Android provide a strong defense for most users, with user education being crucial for effective smartphone protection.

Tech Optimizer

August 16, 2026

Do you really need an antivirus app on your Android?

The relevance of third-party antivirus software for mobile devices has declined as modern Android devices come with robust built-in security features. Google Play Protect blocks millions of harmful apps and conducts regular scans of installed apps. Android employs sandboxing technology to isolate applications, has a proactive permissions system, and provides regular security updates. While Android is not immune to malware, many threats now arise from social engineering tactics rather than technical vulnerabilities. Users face risks when connecting to public Wi-Fi networks, and malicious push notifications can mislead them. Third-party antivirus may be beneficial for users who sideload apps or notice signs of infection, but for most users, Google's Play Protect suffices. Older devices lacking updates are at higher risk, and while antivirus apps can provide additional protection, education and user vigilance are crucial for minimizing risk.

Winsage

August 16, 2026

Microsoft releases new Defender update for Windows 11, 10, Server ISO installations

Microsoft released its August 2026 Patch Tuesday updates, including the latest Defender package for ISO installations. The updates are aimed at combating malware threats and are issued approximately every three months for Windows installation images (WIM and VHD) and ISOs. The latest Windows 11 update is available through the Media Creation Tool (MCT). The security definitions were delivered through security intelligence update version 1.455.50.0, applicable to various platforms including Windows 11, Windows 10 ESU, Windows Server 2022, and others. The update includes enhancements to the anti-malware client, engine, and signature versions, with platform version 4.18.26070.9, engine version 1.1.26070.7, and security intelligence version 1.455.50.0. The previous security intelligence update was version 1.447.236.0, which introduced detections for various malware types. The most recent intelligence update is version 1.457.181.0.

Winsage

August 15, 2026

What Are The Minimum Requirements For Windows 11?

Windows 11 requires a compatible 64-bit processor with a minimum speed of 1 GHz and at least two cores, 4GB of RAM, and 64GB of available storage. The system must use UEFI firmware with Secure Boot capability, support Trusted Platform Module (TPM) 2.0, and have graphics hardware compatible with DirectX 12 or later with a WDDM 2.0 driver. A high-definition display with a resolution of at least 720p, measuring more than 9 inches diagonally, and supporting 8 bits per color channel is also necessary. Microsoft provides the PC Health Check app to assess compatibility with Windows 11. If a PC cannot upgrade, users can enroll in the Consumer Extended Security Updates (ESU) program for Windows 10 version 22H2, which extends security updates until October 12, 2027, without introducing new features. Enrollment options include syncing settings for free, redeeming 1,000 Microsoft Rewards points, or paying a fee, with a license applicable to up to 10 devices.

Winsage

August 15, 2026

What Are The Minimum Requirements For Windows 11?

In 2026, Microsoft Windows 11 requires specific hardware criteria for installation, including a 64-bit processor (1 GHz or faster with at least two cores), a minimum of 4GB of RAM, at least 64GB of available storage, UEFI firmware with Secure Boot, TPM version 2.0 support, and graphics hardware that supports DirectX 12 or later with a WDDM 2.0 driver. A high-definition display with a resolution of at least 720p and a diagonal measurement exceeding 9 inches is also necessary. Compatibility can be checked using the PC Health Check app, which may take up to 24 hours to reflect recent hardware upgrades. For Windows 10 users unable to upgrade, the Consumer Extended Security Updates (ESU) program provides security updates until October 12, 2027, without new features. Enrollment options include syncing settings for free, using Microsoft Rewards points, or paying a fee, with each license applicable to up to 10 devices.

Winsage

August 15, 2026

Windows 11 24H2, Windows Server 2022, Windows 10 Ent. LTSB 2016 get 60-day cut off warnings

Microsoft has issued a 60-day notice regarding the end-of-life dates for several products, following a previous 90-day warning. Mainstream support for Windows Server 2022 will end on October 13, 2026, affecting all editions. Users of Windows 11 version 24H2 Home and Pro, as well as Windows 10 Enterprise LTSB 2016, will stop receiving updates. Microsoft recommends upgrading to Windows Server 2025, with an extended support phase lasting until October 14, 2031, for those unable to upgrade immediately. Windows 11 version 24H2 users must upgrade to version 25H2 to continue receiving updates, while Enterprise and Education variants will have a grace period until October 2027. Organizations using Windows 10 Enterprise LTSB 2016 should transition to Windows 11 Enterprise LTSC 2024, with Extended Security Updates available for purchase for those who remain on the older system. A 180-day evaluation build of Windows Server 2025 can be downloaded for compatibility testing.

Winsage

August 15, 2026

Don’t panic if Windows 11 reboots multiple times for security updates, here’s why it’s happening

Windows PCs are experiencing multiple reboots during the installation of monthly cumulative updates, particularly due to updates related to Secure Boot certificates and accompanying firmware updates. Microsoft is rolling out the Secure Boot certificate update to millions of Windows 11 and Windows 10 devices, with users who haven't received the certificates expected to do so soon, unless firmware limitations arise. Microsoft has acknowledged that multiple reboots may occur during this rollout. The August 2026 Patch Tuesday update addressed around 400 security vulnerabilities and included a Secure Boot certificate update for a wider range of devices. It is advised not to delay updates beyond three days to avoid potential AI-driven security threats. The August 2026 Update also activates the Low Latency Profile for app launches and improves file size displays in File Explorer. Reports indicate that devices lacking the Secure Boot 2023 certificate have successfully received it following this update, and Microsoft will continue deploying certificates via Windows updates in the coming months.

Winsage

August 13, 2026

Nightmare Eclipse Drops Windows Zero-Day Exploit ‘ShieldBreak’

Security researcher Nightmare Eclipse has released a zero-day exploit named ShieldBreak that allows privilege escalation on Windows by targeting a vulnerability in Microsoft Defender. This exploit, designated as CVE-2026-50656, is categorized as a race condition vulnerability and affects the latest versions of Windows 11 and Windows Server 2025, with potential impacts on Windows 10. The exploit was disclosed on June 9, 2026, and Microsoft acknowledged the issue on June 16, rolling out fixes by July 9. The mechanics of ShieldBreak involve manipulating Defender’s scan path and executing a scheduled task to gain System-level privileges. Experts have noted differences between ShieldBreak and the previously known RoguePlanet exploit, emphasizing that ShieldBreak requires Defender to be active to function.