system security Archives

Tech Optimizer

June 9, 2026

I trusted Malwarebytes to secure my PC for a month

Malwarebytes is an effective antivirus solution that provides robust protection against cyber threats, identified and blocked threats efficiently during usage. The software features a user-friendly interface with a Dashboard that includes tools such as a system scanner, VPN, and Trusted Advisor, which assesses system security. The Privacy, Identity, Tools, and Scam Guard sections offer additional functionalities, including monitoring for data breaches and identifying fraudulent emails. Malwarebytes operates with minimal CPU resource usage while effectively blocking malware and phishing attempts. An independent evaluation by MRG Effitas confirmed its high performance, earning a Level 1 certification. Pricing for Malwarebytes Premium starts at an annual fee for the Standard plan, with additional options available.

Tech Optimizer

June 4, 2026

How We Test Antivirus and Security Software

Most software applications clearly indicate their functionality, but the effectiveness of antivirus utilities is often less tangible. PCMag rigorously evaluates antivirus products through comprehensive tests that validate their claims, including real-world malware samples and various protective measures. Each antivirus tool is assessed based on its on-demand scanner and real-time monitor capabilities. PCMag compiles fresh malware samples annually, analyzing them to ensure they are suitable for testing. The testing process includes evaluating malware-blocking capabilities and web-level protection against known malware-hosting sites. Phishing site detection is also tested using recent URLs, and antispam testing has been simplified due to the effectiveness of email providers. Performance impact tests have been discontinued as modern security suites show improved efficiency. Firewall protection is evaluated through program control, exploit defenses, and overall resilience against malware. Parental control features are tested for effectiveness in content filtering and monitoring. Ransomware protection is assessed by releasing real-world samples in a controlled environment. PCMag monitors independent antivirus lab tests from various organizations, including AV-Test, AV-Comparatives, SE Labs, MRG-Effitas, and AVLab, to inform their reviews. An aggregate testing score is calculated to summarize lab results. Testing methodologies do not include VPN evaluations, which are covered separately.

Winsage

June 4, 2026

June 9 Patch Tuesday incoming as Secure Boot deadline looms

Microsoft has announced updates to Secure Boot, enhancing system security by modifying support and registry keys to streamline the boot process. These updates aim to improve the security of Windows devices by ensuring that only trusted software is loaded during startup. Collaborations with Dell and STMicroelectronics are also underway to provide tailored support and integrate advanced security features into chipsets, respectively.

Winsage

June 1, 2026

Windows 11 sandbox flaw lets attackers escape with one click

SafeBreach Labs identified a vulnerability in Windows 11, named Click Or Trick, cataloged as CVE-2025-59199, which was addressed by Microsoft in October 2025. The vulnerability allows a one-click attack from a low-integrity process to achieve arbitrary write capabilities and escalated code execution by exploiting built-in Windows components. The researchers discovered a COM object with an undocumented flag that enabled a low-integrity process to launch a medium-integrity server process using the user's logon token. They found that certain applications could accept command-line parameters through notifications, allowing attackers to execute commands. The Snipping Tool was leveraged to transition execution to another registered application, such as Microsoft Teams, enabling the injection of a remote debugging switch. This exploit chain involved multiple Windows subsystems and was assigned a CVSS score of 7.8.

Winsage

May 30, 2026

How to Disable Windows Defender in Windows 11 (GUI, PowerShell, CMD & Group Policy)

Disabling Windows Defender is common among users setting up virtual machines or optimizing build processes, but it can be frustrating due to Windows 11's resistance to such actions. Many guides suggest using outdated registry keys, which are often reverted by updates, leading to repeated attempts to disable the protections. Users may disable Defender for several reasons, including performance issues with virtual machines, conflicts with Android emulators, hindrances in development environments, troubleshooting disk performance, and security testing in isolated labs. However, disabling antivirus software increases exposure to threats. Microsoft Defender includes components such as Antivirus, Real-Time Protection, Cloud-Delivered Protection, Tamper Protection, and Defender for Endpoint. Tamper Protection is a significant barrier to disabling Defender, as it prevents unauthorized changes to security settings. Key considerations before disabling Defender include the need for administrator rights, the effect of Tamper Protection, potential resets from Windows Updates, temporary toggles for Real-Time Protection, and the option to install third-party antivirus software, which places Defender in passive mode. Methods to disable Defender include using the Windows Security GUI, PowerShell commands, Command Prompt, or Group Policy (available only for certain editions). Disabling Tamper Protection requires accessing the GUI or being managed by an organization. To check if Defender is disabled, users can use PowerShell to review specific fields. Common reasons for Defender reactivating include enabled Tamper Protection, system reboots, Windows Updates, lack of third-party antivirus, and security policy refreshes. Installing a legitimate third-party antivirus is often the best way to maintain a consistent state. Instead of disabling Defender, users can add exclusions for specific folders related to virtual machines or development tools, allowing them to maintain protection while avoiding conflicts. Troubleshooting common problems includes ensuring elevated sessions for PowerShell, checking Tamper Protection status, and understanding the limitations of the Group Policy editor based on the Windows edition. Disabling Defender may be appropriate in specific scenarios, but for regular use, especially on machines handling sensitive tasks, the risks generally outweigh the benefits. Using exclusions is recommended for performance improvements without compromising security.

Winsage

May 27, 2026

Your PC’s trust in Windows has an expiration date

Microsoft will change Secure Boot certificates in June 2026, impacting Windows 11 PCs. If users do not update the certificates, their PCs may still function but will lack critical boot updates and malware blacklists, potentially compromising security. Without the new certificates, systems cannot run the latest Windows Boot Manager, making them vulnerable to bootkit malware and hindering future Windows feature updates. Older computers using BIOS are exempt from this issue. The new Secure Boot certificates are valid until 2038. Users can check their Secure Boot status in the Windows Security app; a green circle indicates readiness for the deadline.

Winsage

May 26, 2026

‘Restart Multiple Times’—Microsoft Changes Windows Next Week

Microsoft will begin the expiration of Secure Boot certificates on most PCs in June, marking the end of a 15-year period of stability. This affects all PCs manufactured before 2023. Users will likely need to perform multiple restarts during the update process, which includes pushing data into firmware and loading a new bootloader. Ignoring the Secure Boot deadline in June 2026 may lead to significant security risks, as Microsoft will stop providing essential boot updates and malware blacklists. The Windows Security App has been updated to help users monitor these changes, and users should check for warnings indicating the status of Secure Boot. It is important for Windows 10 users to ensure they are enrolled in the Extended Security Updates (ESU) program to avoid vulnerabilities.

Winsage

May 25, 2026

5 things Microsoft isn’t fixing with Windows 11 that I’d love to see happen

Microsoft is enhancing Windows 11 with significant updates, including a revamped Windows Update, performance improvements, and customization options for the Start menu and taskbar. The company is addressing device driver issues and engaging with the Windows 11 community for feedback. Users desire features such as a toggle to eliminate advertisements and recommendations, the option to remove references to OneDrive, Bing, Edge, and Game Pass, and the ability to disable web search results in Windows 11 search. The requirement for a Microsoft account for Windows 11 installation has frustrated users who prefer local accounts, prompting calls for the restoration of this option. Users also seek meaningful control over default app installations and the ability to turn off telemetry easily, as current settings are complex. Additionally, there are long-standing projects in Windows 11 that require completion, such as fully integrating dark mode, incorporating the Light Switch feature from PowerToys, and accelerating the migration of legacy features from the Control Panel to the Settings app.

Winsage

May 24, 2026

Windows Secure Boot certificates start expiring June 24

Windows Secure Boot is a feature of the Unified Extensible Firmware Interface (UEFI) specification that enhances system security by ensuring only trusted software is loaded during the startup sequence. It verifies the digital signatures of boot components to protect against malicious software and unauthorized access. Key aspects include enhanced security by preventing untrusted code execution, compatibility with various hardware and software configurations, and user control over Secure Boot settings for customization.

Winsage

May 10, 2026

I dug into the new Windows Update rules coming to Windows 11, and these are the 5 things you need to know

Microsoft is implementing enhancements in Windows 11 to improve the Windows Update experience for users. Key changes include new pause controls, a redesigned Power menu, reduced forced restarts, and smarter recovery features for failed updates. A new system will automatically resolve installation issues in the background, reducing the need for manual troubleshooting. Users can now skip system updates during the Out-of-box Experience (OOBE), but doing so will prevent the download of the latest drivers, features, or security patches until a manual download is initiated or automatic updates resume. Despite these improvements, there are still limitations on user control over updates, such as the need for manual extensions to pause updates indefinitely and the requirement to confirm skipping updates twice during setup.