updates Archives

Winsage

May 18, 2026

Microsoft admits Windows users ‘experienced some challenges’ with the forced CoPilot key — now it’s finally doing something about it

Microsoft introduced a dedicated Copilot key with its Copilot+ PCs, marking a significant change in Windows keyboard design after three decades. Users have expressed dissatisfaction with the key, particularly those who rely on the Right Ctrl or Context menu keys for shortcuts and assistive technologies. Microsoft acknowledged these challenges and announced that a future Windows 11 update will allow users to remap the Copilot key to function as either the Context menu key or Right Ctrl key. While some PC manufacturers have provided their own remapping solutions, they often require additional steps. The timeline for the update is unspecified, but major updates typically occur in October or September.

Winsage

May 18, 2026

Old Windows Flaw Returns to Spotlight With MiniPlasma Exploit

Security researcher Chaotic Eclipse has introduced a Windows exploit called MiniPlasma, which may allow privilege escalation from standard user accounts to SYSTEM level access, even on patched versions of Windows. This exploit is linked to CVE-2020-17103, a flaw in the Windows Cloud Filter driver that was addressed by Microsoft in December 2020. Tests have reportedly demonstrated the exploit functioning on a patched Windows 11 Pro system, achieving SYSTEM access from a standard user account. The exploit involves an undocumented registry-key path within the .DEFAULT user hive, raising concerns about the effectiveness of the 2020 fix. There is a discrepancy between public and Canary builds of Windows 11, with the exploit working on the public build but not on the Canary build. Microsoft’s April 2026 Patch Tuesday updates included another entry related to the Windows Cloud Files Mini Filter Driver elevation-of-privilege issue. Defenders are advised to monitor the CVE-2020-17103 record for further clarification regarding the status of the original fix and the implications of the MiniPlasma exploit.

AppWizard

May 18, 2026

You think you’ve seen it all and then there’s a Wayland Compositor inside Minecraft on Linux

A developer named EVVIE has integrated a Linux Wayland Compositor with Minecraft, enabling users to display Linux desktop windows within the game. This integration allows for an immersive experience similar to using a virtual reality headset. In a demonstration, EVVIE played the rhythm game Osu! while navigating the Minecraft interface. The project is available on GitHub under the GPL license and requires Minecraft version 26.1.2, the Fabric mod loader, xkbcommon library version 1.11.0, and xkbcommon tools. Additionally, recent updates for Minecraft have introduced a friends list feature for the Java version.

Winsage

May 18, 2026

Microsoft confirms Windows 11 security update install issues

Microsoft has acknowledged a significant issue with the May 2026 Windows 11 security update, KB5089549, where users are encountering difficulties in installation, specifically the 0x800f0922 error code. This issue is primarily due to insufficient free space on the EFI System Partition (ESP), especially for devices with 10 MB or less available. The installation may fail during the reboot phase at around 35–36% completion, with users receiving notifications like "Something didn't go as planned. Undoing changes." Log entries may indicate insufficient ESP free space, such as "SpaceCheck: Insufficient free space" and "ServicingBootFiles failed. Error = 0x70." Microsoft recommends affected users utilize the Known Issue Rollback feature to reverse problematic updates and advises IT departments to install and configure the relevant Group Policy to address the issue.

AppWizard

May 18, 2026

After fixing a family friend’s phone, I realized Google Play Protect is not doing enough

An elderly relative and a friend were misled into downloading problematic apps due to deceptive advertisements that appeared as system notifications. These ads led users to the Play Store under false pretenses, resulting in the installation of apps that generated excessive ads and altered user interfaces. In one case, a user unknowingly installed a launcher app disguised as a messaging application, which compromised her device's functionality and privacy by requesting excessive permissions. Google Play Protect failed to identify the problematic app, which continued to generate ads even after its removal. The app's misleading title and vague description contributed to the confusion, highlighting the need for improved safeguards in the Play Store to protect less tech-savvy users.

Winsage

May 18, 2026

MiniPlasma zero-day gives SYSTEM access on fully patched Windows 11

GitHub has introduced enhancements aimed at improving security and user experience on its platform. Key features include a more robust authentication process to protect user accounts, improved monitoring tools for tracking changes and vulnerabilities in repositories, a streamlined interface for easier navigation, and new collaboration features such as integrated chat options and real-time updates. Additionally, GitHub has launched initiatives to encourage user feedback to ensure the enhancements meet the needs of its user base.

Winsage

May 18, 2026

Microsoft Brings Back Windows 10-Style Taskbar and Start Menu Customization in Windows 11

Microsoft is set to introduce comprehensive support for Taskbar and Start Menu customization in Windows 11, rolling out to Windows Insiders in the Experimental channel over the next few weeks. Users will be able to reposition the Taskbar to any side of the screen and adjust icon alignment with options for top-aligned, center-aligned, left-aligned, and right-aligned. Access to these settings will be through Settings > Personalization > Taskbar > Taskbar behaviors. A new feature will also allow for smaller icons and a more discreet Taskbar presence. Additionally, a redesigned Start Menu customization initiative will allow users to select between smaller and larger Start sizes, independently hide or show sections like Pinned, Recent, and All, and remove their name and profile photo for privacy. The Start Menu's file recommendations will be decoupled from File Explorer's recent items and jump lists, meaning disabling recommendations will not affect recent activity elsewhere in Windows. The recommendation area will be rebranded as "Recent," ensuring visibility for newly installed applications while refining the selection of displayed files. These updates are expected to be available to regular Windows 11 users on versions 24H2, 25H2, and 26H1 within approximately a month.

Winsage

May 18, 2026

MiniPlasma Windows 0-Day Enables SYSTEM Privilege Escalation on Fully Patched Systems

Chaotic Eclipse has unveiled a proof-of-concept (PoC) for a Windows privilege escalation zero-day vulnerability, codenamed MiniPlasma, which targets the "cldflt.sys" component and could grant SYSTEM privileges on fully patched Windows systems. This vulnerability was initially reported to Microsoft by James Forshaw from Google Project Zero in September 2020. Although Microsoft was believed to have resolved it in December 2020 as part of CVE-2020-17103, further analysis indicates that the flaw remains unaddressed. Chaotic Eclipse demonstrated that the original PoC could still spawn a SYSTEM shell reliably on his machines. The vulnerability is believed to affect all versions of Windows, with confirmation that MiniPlasma opens a "cmd.exe" prompt with SYSTEM privileges on Windows 11 systems with the latest May 2026 updates, though it does not function on the latest Insider Preview Canary version. In December 2025, Microsoft addressed a separate privilege escalation flaw in the same component, identified as CVE-2025-62221, which had a CVSS score of 7.8 and was reportedly being exploited by threat actors.

Winsage

May 18, 2026

Microsoft Changes ‘Most Windows Devices’ In June—Update Yours Now

Microsoft has alerted users that Secure Boot certificates will begin to expire in June, affecting most Windows devices. Users must update these certificates to avoid disruptions, as failing to install the latest Windows update could prevent devices from booting securely. A "one-time restart" will be required after the update to load new certificates. If the update is not installed by June 1, users may see a red stop icon in the Windows Security app. The update issued on May 12 was modified on May 15 to warn that it might fail to install. Microsoft indicates that most users will need to restart their PCs, although this may revert the update. The latest updates will expand the number of devices eligible for new Secure Boot certificates, but users are uncertain about how many PCs will be affected due to a phased rollout approach.

AppWizard

May 18, 2026

Why There’s Simply No Need For Android Antivirus Apps Anymore

Android users are advised to avoid clicking on random links and sideloading applications to maintain safety. Threats such as phishing scams, deceptive pop-ups, and malicious links still exist in the Android ecosystem. Android includes built-in security features like Google Play Protect, which scans applications for malware and alerts users to threats, and Google Safe Browsing, which warns against hazardous websites. Monthly security updates are released to patch vulnerabilities, but the speed of these updates can vary by manufacturer. Users should avoid downloading apps from unverified sources, regularly review app permissions, and install security updates promptly. While antivirus applications can be useful, cultivating smart usage habits is crucial for effective security.