NewApp Digest
search bot

Security

Your Windows update experience just got updated
Winsage
April 24, 2026

Your Windows update experience just got updated

Windows Insiders are receiving enhancements to the Windows Update experience based on user feedback, focusing on providing more control and reducing disruptions. Key features include: 1. The ability to skip updates during the out-of-box experience (OOBE). 2. Extended options for pausing updates for up to 35 days, with the ability to re-pause as needed. 3. Separation of power actions from update actions, allowing users to shut down or restart without triggering updates. 4. Enhanced insights on available updates, including device class information for driver updates. Additionally, the update process will be unified to minimize reboots, with a single restart expected per month for most users. Updates will download in the background and can be manually initiated by users. Improvements also focus on reducing update times and implementing automatic recovery measures for update failures.
Fileless Malware and Email Authentication Gaps
Tech Optimizer
April 24, 2026

Fileless Malware and Email Authentication Gaps

Fileless malware operates stealthily within networks, utilizing legitimate system tools like PowerShell and Windows Management Instrumentation (WMI) to execute malicious code in memory without leaving traces on disk. Traditional antivirus solutions struggle to detect these threats due to their reliance on file signatures. The primary vector for fileless malware is email, where attackers use spoofed messages to trick users into activating malicious scripts. Misconfigurations in Sender Policy Framework (SPF) and DomainKeys Identified Mail (DKIM) records create vulnerabilities that attackers exploit to deliver spoofed emails. Traditional endpoint protection mechanisms are inadequate against fileless attacks, necessitating a shift towards behavioral analysis for detection. Organizations must assess their preparedness by ensuring proper email authentication configurations and enhancing endpoint security capabilities. Integration among security teams and updated employee security awareness programs are also essential. Sendmarc helps organizations mitigate vulnerabilities by providing visibility into SPF, DKIM, and DMARC configurations and enforcing DMARC to block unauthenticated messages.
Windows 11 now shows if your Secure Boot certificates are ready for June
Winsage
April 24, 2026

Windows 11 now shows if your Secure Boot certificates are ready for June

Windows 11 has introduced a feature that allows users to verify the status of their Secure Boot certificates directly from system settings, simplifying the process ahead of the June 2026 expiration deadline. This update enhances accessibility and empowers users to maintain system security against vulnerabilities. Secure Boot helps prevent unauthorized software and malware from loading during startup, and confirming certificate status can mitigate risks associated with system breaches.
Microsoft beefs up Remote Desktop security with ... hard-to-read messages
Winsage
April 24, 2026

Microsoft beefs up Remote Desktop security with … hard-to-read messages

Microsoft has released an update to improve the security of its Remote Desktop feature, which includes a warning for users opening Remote Desktop (.rdp) files. However, this warning is not displaying correctly for some users due to a bug identified in the Known Issues list after the April 14 update. The issue primarily affects users with multiple monitors set to different display scaling, leading to overlapping text or obscured buttons. Microsoft has advised users to synchronize their display scaling settings or use keyboard navigation as a workaround. The company plans to address this issue in a future Windows update but is not issuing an Out-of-Band update specifically for it. Additionally, a serious vulnerability (CVE-2026-40372) was discovered in the .NET framework, affecting versions 10.0.0 to 10.0.6, which requires immediate attention. This vulnerability impacts all Windows versions that received the update, including Windows 11 26H1.
Microsoft Says You Don't Need A Third-Party Antivirus App Anymore
Tech Optimizer
April 24, 2026

Microsoft Says You Don’t Need A Third-Party Antivirus App Anymore

Microsoft Defender Antivirus effectively addresses everyday security risks for many Windows 11 users without the need for additional software. It is active by default, integrated into the OS, and continuously updated. Windows 11 includes various security features, such as Microsoft Defender SmartScreen, Smart App Control, and Controlled Folder Access, which protect against unsafe links, untrusted applications, and unauthorized data modifications. Microsoft Defender scans files upon access and monitors system processes for threats, utilizing cloud capabilities to address emerging risks. While many users find Microsoft Defender adequate, experts note it may not meet everyone's needs, particularly in enterprise environments. Reviews have pointed out shortcomings, such as low phishing detection and inadequate ransomware protection, with a protection accuracy rating of 93 percent compared to some paid alternatives that achieved 100 percent.
Is Microsoft defender enough to protect Windows?
Tech Optimizer
April 24, 2026

Is Microsoft defender enough to protect Windows?

The operating system on devices manages background tasks, with security being a key focus. Microsoft has improved Microsoft Defender, its pre-installed antivirus software, and now recommends it as a viable protection option for users. Microsoft Defender Antivirus is effective against everyday security risks for many Windows 11 users without needing additional software. It is deeply integrated into the operating system, continuously updated, and works alongside other security features to protect against hacking techniques, unsafe links, and untrusted applications. Microsoft Defender SmartScreen alerts users to suspicious content, while Smart App Control and Controlled Folder Access provide additional protections. Microsoft emphasizes the need to enable security features and keep devices updated. While many users find Defender adequate, experts note it has limitations, particularly in phishing detection and ransomware protection, with a protection accuracy rating of 93 percent, which is lower than some paid alternatives. For users handling sensitive tasks, a third-party antivirus solution is recommended for better protection.
Search