Security Archives

Winsage

September 9, 2026

Windows 11 is getting faster boot times and 8GB RAM performance

At the IFA 2026 event, Microsoft announced that Windows 11 will feature significantly faster boot times and improvements in the responsiveness of Windows Hello, the biometric authentication feature. The company is committed to optimizing Windows 11 for devices with 8GB of RAM, ensuring efficient performance on lower-end PCs.

Winsage

September 9, 2026

Microsoft Patch Tuesday for September 2026 — Snort rules and prominent vulnerabilities

Microsoft's September 2026 security update revealed 973 vulnerabilities, with 113 classified as critical. Two actively exploited vulnerabilities are CVE-2026-81963 (Windows Update Stack, elevation of privilege, CVSS 7.8) and CVE-2026-85880 (Windows ALPC, elevation of privilege, CVSS 7.8). Among the 113 critical vulnerabilities, 82 are remote code execution (RCE) vulnerabilities. Notable vulnerabilities include: - CVE-2026-69676: RCE in Windows Kerberos, CVSS 8.8, authentication bypass. - CVE-2026-69852: RCE in Windows RRAS, CVSS 7.5, heap-based buffer overflow. - CVE-2026-72957: RCE in Windows Deployment Services, CVSS 7.8. - CVE-2026-69854: Elevation of privilege in Spring Cloud Azure, CVSS 9.0, improper authentication. - CVE-2026-83501: Information disclosure in Windows VBS, CVSS 5.5. - CVE-2026-69730: RCE in Windows DNS Server, CVSS 9.8. Less likely to be exploited vulnerabilities include: - CVE-2026-69845: RCE in Windows DHCP Server, CVSS 9.8, heap-based buffer overflow. - CVE-2026-65772: Vulnerability in Microsoft Dynamics 365 On-Premises, CVSS 8.8, deserialization of untrusted data. - CVE-2026-66302: RCE in Skype for Business, CVSS 9.8. Additional critical vulnerabilities include: - CVE-2026-62916: Elevation of privilege in Microsoft Entra ID, CVSS 9.1. - CVE-2026-83941: Elevation of privilege in Entra ID, CVSS 9.9. - CVE-2026-80098: Vulnerability in Copilot Studio, CVSS 9.3, improper verification of cryptographic signatures. Talos is releasing a new Snort ruleset to detect attempts to exploit these vulnerabilities, with specific SIDs for Snort 2 and Snort 3 rule coverage.

AppWizard

September 8, 2026

GrapheneOS is ditching AOSP apps and building its own alternatives

GrapheneOS is an open-source Android-based operating system focused on security and user privacy, appealing to privacy-conscious users. It features an enhanced app sandbox, a privacy-first design for managing app permissions, and regular security updates. The operating system has gained attention on social media platforms like X and Mastodon, where users share tips and experiences, fostering a supportive community. This engagement allows for real-time feedback, collaborative problem-solving, and increased awareness of privacy and security topics.

Winsage

September 8, 2026

Patch Tuesday is here — Windows 11 is expected to set yet another record for security updates in a month

Windows 11's latest Patch Tuesday delivered over 650 security fixes, a six-fold increase compared to typical monthly updates. This surge is linked to advancements in artificial intelligence, which have accelerated vulnerability discovery and the urgency to address them. AI aids Microsoft's engineers in the patching process but is also exploited by malicious actors, creating an ongoing cybersecurity arms race.

Winsage

September 8, 2026

Microsoft Releases September 2026 Patch Tuesday Updates

Microsoft released its September 2026 Patch Tuesday updates for Windows 11, focusing on versions 26H1 and 25H2/24H2. Key features include: - Taskbar customization for versions 25H2 and 24H2, allowing users to choose the taskbar's location and size. - Faster Windows Search with options to hide web and Microsoft Store suggestions. - Touch scrolling support in the "Recommended" section of File Explorer. - Start Menu customization options for size and visibility of sections. - Stability improvements for Microsoft Teams and Outlook on Arm64 PCs. For version 26H1, updates include: - Improved app search and Settings relevance in Windows Search. - Voice Isolation technology in Voice Access. - Updated taskbar notification badges and Weather widget display on the Lock Screen. - New gesture controls for Precision Touchpads. - Enhanced Sign-in Security supporting peripheral fingerprint sensors. - Optimized Windows Update progression calculations and clean-up logic. - Power settings allowing users to set energy saver activation thresholds. Microsoft is using AI to identify vulnerabilities, with 997 Common Vulnerabilities and Exposures reported, including one actively exploited vulnerability (CVE-2026-81963). Windows 11 version 26H2 has been made available to Insiders, with a public rollout expected next month.

Winsage

September 8, 2026

Microsoft releases Windows security update addressing 723 flaws

Microsoft released its September 2026 security updates, addressing two critical Windows elevation-of-privilege vulnerabilities: CVE-2026-85880 and CVE-2026-81963. Both vulnerabilities were exploited before their public disclosure on September 8. CVE-2026-85880 involves a heap-based buffer overflow in the Windows Advanced Local Procedure Call (ALPC), allowing low-privileged attackers to gain SYSTEM privileges. CVE-2026-81963 affects the Windows Update Stack due to improper link resolution and access controls, enabling similar privilege escalation. The September release also includes 974 Common Vulnerabilities and Exposures (CVEs) across various Microsoft products, with 723 affecting Windows. Users of Windows 11 24H2 and 25H2 receive updates via KB5124008, while Windows 11 26H1 receives KB5124012. Windows 11 24H2 Home or Pro editions will reach end of servicing on October 13, 2026. Users are advised to install the updates promptly and back up important data.

AppWizard

September 8, 2026

Ohio Mobile ID Arrives in Google Wallet, Opening the Program to Android

Ohio residents with Android devices can now integrate their driver's license or state ID into Google Wallet as part of the state's Mobile ID program. This digital credential is a companion to the physical card, and users are encouraged to carry their plastic IDs. To add the credential, users can navigate through the Google Wallet app. The digital ID is accepted for age and identity verification at various businesses, state buildings, TSA checkpoints, and casinos in Ohio. It utilizes specialized readers for presentation and allows users to review shared data. The credentials are encrypted and can be remotely erased if the phone is lost or stolen. Participation in the program is voluntary and free, adhering to privacy and security standards. Governor Mike DeWine highlighted the convenience of this innovation, and vendors are expanding support for mobile driver’s licenses in multiple states.

AppWizard

September 8, 2026

7 Ways To Use Private Space On Your Android Device That Are Actually Helpful

Google's Private Space is a feature on Android devices that creates a secure environment for managing sensitive information. It allows users to lock banking apps, providing a secure vault that is hidden from the main interface and protected from malware and unauthorized access. Users can enhance security with a unique PIN or biometric authentication, and the space locks automatically when the smartphone is secured. Private Space also serves as a secure repository for personal documents, enabling users to move files like PDFs and IDs into it, ensuring they remain inaccessible until the space is locked. Additionally, Private Space allows users to separate personal and professional digital lives by logging into a different Google account, maintaining distinct emails, contacts, and calendar events. Users can install separate instances of messaging and social media apps within Private Space to manage multiple accounts securely. It also helps keep dating apps hidden, protecting users' privacy and personal data. When sharing devices, Private Space ensures personal data remains secure behind authentication. Lastly, it allows users to store data locally without syncing to the cloud, prioritizing privacy over convenience.

Winsage

September 8, 2026

4 ways to get Windows 11’s newest features sooner

Several pathways exist to expedite the official rollout of Windows updates. Users can navigate to Windows Update settings to enable the latest updates, install optional preview updates manually, join the Windows Insider Program for pre-release versions, or use ViveTool to unlock hidden features. 1. Enable the latest updates: A toggle in Windows Update settings allows users to receive new features and updates as soon as they are available. 2. Install optional updates: Preview updates are released towards the end of each month and can be installed manually through Windows Update. 3. Use Windows Insider: The Insider Program offers pre-release versions of Windows, with the Beta Channel for innovation and the Release Preview Channel for stability. 4. Enable hidden features with ViveTool: This tool unlocks features already present in Windows but not activated, requiring technical expertise. Activating the toggle in Windows Update prioritizes the device for new features while ensuring essential security updates continue.

AppWizard

September 8, 2026

Google Wallet will now let you add physical transit cards and balances with NFC

Google has released version 26.35 of Google Play Services, which includes the ability to integrate physical transit cards into Google Wallet using NFC technology, allowing users to access public transportation with NFC-enabled Android devices. This feature requires an NFC chip in the device. The update also includes a redesigned “Add a card” success screen in the Wallet app. Additionally, Google has launched version 53.1 of the Google Play Store app, featuring a short description of key features for similar apps, the ability to see which devices have specific apps installed, and a new navigation bar for exploring interests. Users can access updates for Google System Services through their device settings or enable automatic updates.