Security Archives

Winsage

June 9, 2026

Microsoft Releases June 2026 Patch Tuesday Updates

Microsoft's June 2026 Patch Tuesday updates for Windows 11 include enhancements for versions 25H2, 24H2, and the new 26H1, which is designed for new PCs with Qualcomm ARM chips. Key features of the update include: - Shared audio allowing two users to listen to the same audio stream via Bluetooth LE audio accessories. - NPU usage displayed in Task Manager for devices with NPUs, including optional columns for NPU and NPU Engine. - Multi-App Camera support enabling multiple applications to access the camera stream simultaneously. - Improvements to the Magnifier feature for clearer announcements and support for magnifying protected content. - Customizable user folder names during setup. - Optimized Windows Search functionality for locating local files with just two characters. - Performance enhancements through a “Low Latency Profile” for faster app launches and core shell experiences. The update also addresses a BitLocker security bypass vulnerability (CVE‑2026‑45585) that could allow attackers to circumvent BitLocker Device Encryption. The KB5095051 patch for version 26H1 includes support for shared audio over Bluetooth LE and features from the previous month's update, such as Xbox mode and expanded archiving support in File Explorer.

Winsage

June 9, 2026

Microsoft’s June 2026 Patch Tuesday: High stakes and hidden features

Microsoft has updated the Windows 11 Insider builds regarding Secure Boot expiration, highlighting its importance in ensuring only trusted software loads during startup. The expiration can lead to vulnerabilities, prompting users to understand the associated risks. Microsoft has provided resources at Microsoft.com/Secure Boot Expiration to help users prepare for these changes. Additionally, the National Institute of Standards and Technology (NIST) has identified a new vulnerability, CVE-2026-42897, emphasizing the need for vigilance in cybersecurity. Users are advised to regularly check for updates, engage with the Microsoft Tech Community, and follow best practices for device security.

Tech Optimizer

June 9, 2026

Don’t get victimized by this updated version of the McAfee email scam

Cybercriminals are sending fraudulent McAfee renewal notices claiming users owe money for antivirus subscriptions they never purchased. These emails create a sense of urgency, warning that devices are unprotected or that charges will be processed automatically. The scams have become more sophisticated, using AI-generated emails and counterfeit invoices to appear credible. Although Microsoft is the most impersonated company, McAfee scams are on the rise, featuring messages about expiring or automatically renewed subscriptions costing hundreds of dollars. Victims are often misled into contacting scammers posing as customer-service agents, who may request sensitive information or control over their devices. McAfee advises customers to verify subscription status through their official website and not to respond to unsolicited emails. Warning signs of these scams include suspicious sender addresses, generic greetings, grammatical errors, unusually large charges, and urgent demands for action. The Federal Trade Commission warns consumers about tech-support and antivirus scams, urging them to report phishing emails and monitor accounts for unauthorized activity.

Winsage

June 9, 2026

Get Word, Excel, PowerPoint, and Windows 11 Pro for a one-time $26

For a one-time payment of .99, users can acquire both Microsoft Office Professional Plus 2019 and Windows 11 Pro, a deal that contrasts with the regular price of 9.99, resulting in a saving of 0.01. Microsoft Office 2019 includes applications like Word, Excel, PowerPoint, Outlook, OneNote, Publisher, and Access, featuring enhanced tools for user experience. Windows 11 Pro offers a cleaner interface, improved security features, productivity enhancements, and tools such as BitLocker and Hyper-V. It also includes a built-in Copilot for quick answers and writing assistance.

Tech Optimizer

June 9, 2026

I trusted Malwarebytes to secure my PC for a month

Malwarebytes is an effective antivirus solution that provides robust protection against cyber threats, identified and blocked threats efficiently during usage. The software features a user-friendly interface with a Dashboard that includes tools such as a system scanner, VPN, and Trusted Advisor, which assesses system security. The Privacy, Identity, Tools, and Scam Guard sections offer additional functionalities, including monitoring for data breaches and identifying fraudulent emails. Malwarebytes operates with minimal CPU resource usage while effectively blocking malware and phishing attempts. An independent evaluation by MRG Effitas confirmed its high performance, earning a Level 1 certification. Pricing for Malwarebytes Premium starts at an annual fee for the Standard plan, with additional options available.

Winsage

June 9, 2026

Microsoft Makes Windows 11 an Agentic Platform

Microsoft announced a suite of agent-centric features for Windows 11 at the Build 2026 conference, introducing the Microsoft Agent Platform for local AI agents. This includes enhanced integration with Microsoft Foundry, GitHub, and the M365 suite. The developer documentation covers local agent runtimes and isolation patterns, highlighting the Microsoft Execution Containers SDK and Entra Agent ID. Enterprise controls like Intune and Agent 365 are also featured. The upcoming Copilot Actions will allow agents to interact with local files and applications, aimed at improving workflows. Microsoft is addressing security concerns with resources outlining strategies to mitigate risks such as cross-prompt injection. Industry commentary indicates a growing discussion about privacy and security in relation to these changes.

Winsage

June 9, 2026

Hybrid AI Agents, Orchestration, and the Real Reason Microsoft is Fixing Windows 11 ⭐

Over the past weekend, the author reviewed session videos from Build 2026, focusing on Windows 11. The sessions were categorized into three areas: Windows app development, developer productivity, and agentic AI. The introduction of hybrid agents, which combine local AI sub-agents, was a notable development. Microsoft's partnership with Qualcomm led to the launch of Windows 10 on Arm-based PCs branded as Always Connected PCs, which evolved into Copilot+ PCs with Nuvia-powered chips for Windows 11. The Copilot+ PCs emphasize on-device AI experiences through powerful neural processing units (NPUs). The introduction of second-generation Snapdragon X2-based PCs is underway, although adoption is slower than expected. Microsoft confirmed that Windows 11 will integrate AI agents, including local AI agents and hybrid agents. The capabilities of local AI models are being enhanced, and Windows AI APIs will now support CPUs and GPUs. New Nvidia chipsets will enable large language models to run locally on PCs. The orchestration of local and cloud AI components is essential for efficient AI workload management. Microsoft is addressing user pain points to support a robust local foundation for hybrid AI, aiming to improve Windows 11 overall.

AppWizard

June 8, 2026

NFCShare Android malware spreads via fake banking app updates on GitHub

New variants of the NFCShare Android malware are disguised as fake updates for legitimate banking applications and are targeting customers of various banks in Europe through a phishing campaign to steal sensitive payment card data. The malware prompts victims to place their cards near the NFC chip of their mobile devices, using Android’s IsoDep interface to read card information, including card number, type, expiry date, and a 4-digit PIN. The stolen data is exfiltrated to the attacker’s command-and-control host via a WebSocket channel. Recent attacks began on May 14, with victims directed to a phishing site that impersonates a legitimate bank and then to a GitHub repository hosting a malicious APK file. The repository has hosted 56 unique APKs impersonating banking applications primarily from Italy and Spain. The malware has evolved from initially targeting Deutsche Bank in Germany to a broader range of banks. The latest version features malformed APK packaging to complicate automated analysis. Users are advised to download banking applications only from Google Play and to be cautious of verification requests that ask for NFC card scans.

Winsage

June 8, 2026

Microsoft lets users disconnect Bing from Windows 11 search

Microsoft is set to enhance the user experience for Windows 11 by allowing users to disable web search results during local searches. This feature will be available in the settings menu under Privacy & Security > Search, with a new toggle under "Show suggested search results." Additionally, users will have the option to disable Microsoft Store suggestions in the Windows 11 search feature. Currently, turning off web results requires manual adjustments in the Windows registry, but the upcoming update aims to simplify this process. The exact rollout date for this update has not been announced.

Winsage

June 8, 2026

Microsoft making much needed change to Windows 11, 10 Patch Tuesday security updates

Microsoft has rolled out new Defender patches for Windows 11 ISOs, aligning with its commitment to security updates. Updates for Microsoft Defender for Endpoint's endpoint detection and response (EDR) will no longer be included with monthly Windows security updates or Patch Tuesdays; they will now be delivered via Microsoft Update. This change aims to allow faster deployment of EDR enhancements independently of the operating system's update cycle. The rollout for Windows 10 began in late May 2026, with plans to extend support to Windows 11 and other versions by fall 2026. EDR updates will be delivered using KB5005292, contingent on prerequisite updates. Systems must run Sense version 10.8798.25857.1000 or later and have specific Windows updates installed to qualify for the new delivery method. Organizations should align their update policies with this new approach before the broader rollout. In case of significant issues, the EDR update can be reverted using a specific command. Further details are available in the Microsoft 365 Admin Center under message ID MC1381119.