vulnerabilities Archives

Winsage

October 20, 2026

ReactOS reaches major milestone with NTFS install support

ReactOS has integrated the ability to install directly onto an NT File System (NTFS) drive partition, marking a significant advancement as it moves closer to its beta release. Previously, users had to maintain a FAT32 partition for installations. The ReactOS team aims for binary compatibility with Windows Server 2003, making NTFS support a crucial milestone. However, the new driver currently lacks essential features like caching, journaling, and robust security support, which could affect performance and security. Users are advised to be cautious and aware of potential bugs as they explore this new functionality.

Winsage

October 18, 2026

Windows 11’s last Secure Boot deadline hits Monday, Microsoft reveals what happens to your PC

Microsoft Windows Production PCA 2011, the certificate for signing the Windows boot loader, will expire on October 19, 2026. This follows the earlier expiration of two other 2011 certificates in June 2026. PCs without the new certificates will still boot and receive standard updates but will miss out on new security enhancements for the early boot process. The new certificates from 2023 are replacing the 2011 certificates. The KEK certificate, essential for authorizing updates to signature databases, and the Microsoft UEFI CA 2011, which signs third-party boot loaders, will also be replaced by new certificates. Users can check their Secure Boot status through the System Information tool or Windows Security. Microsoft is gradually rolling out the new Secure Boot certificates through Windows Update, and users are advised not to disable Secure Boot to avoid complications. Dell will not issue BIOS updates for platforms that reached their end of service life before January 1, 2026. The transition to Secure Boot has faced challenges for older PCs, and developers are advised against pinning Secure Boot certificates in their applications. Multiple restarts may be required for full integration of the new certificates.

Winsage

October 16, 2026

Faster protection, fewer interruptions: How Microsoft Edge is rethinking updates

Microsoft Edge is developing a seamless-updates prototype that allows security updates to be applied without interrupting users' work. Currently, the browser has a Restart to update on idle feature that applies updates when devices are not in use. The goal is to eliminate the need for users to click an update button, enabling background updates that do not disrupt ongoing tasks. Microsoft Edge can also issue patches independently of the Chromium release schedule for urgent security needs. Additionally, Security Update Alerts help organizations manage updates by notifying administrators about critical updates and vulnerabilities. These alerts are available for managed Windows devices through the Edge management service without additional licensing.

Tech Optimizer

October 16, 2026

How to protect your PC from malware

Malware, short for "malicious software," is designed to gain unauthorized access to computers or networks for purposes such as data theft and surveillance. It can be introduced through disguised software or deceptive links. To protect against malware, it is essential to install antivirus software, scan external drives before connecting them, be cautious about downloads, avoid suspicious websites and emails, update applications regularly, enable Tamper Protection on Windows, minimize file sharing, enable Firewall protection, watch out for phishing attacks, and back up data regularly. The future of malware protection may involve leveraging artificial intelligence and machine learning to enhance detection and analysis of threats.

AppWizard

October 16, 2026

Malware Found Pre-Installed In Thousands Of Budget Android Phones – Here’s What We Know

A report from Bitdefender reveals a malware campaign named "Midnight Mimosa" affecting budget and midrange Android smartphones, particularly those using low-energy MediaTek chipsets. This malware, embedded in devices marketed under various labels like Cubot and Doogee, operates through an application called "System" (package name com.android.system.lite) that displays hidden ads and can allow hackers to control the devices. Thousands of devices have been tracked with this malware, with 13% of affected devices located in Mexico, 8% in the United States, and less than 3% in Canada. The malware's source traces back to Android ODM Shenzhen Zediel. Additionally, Bitdefender identified 13 other ad fraud-related apps signed by the same entity that were previously available on the Google Play Store. Major manufacturers like Google, Motorola, and Samsung have security protocols to protect their firmware, unlike the affected budget brands.

AppWizard

October 16, 2026

Ledger unveils $849 device built to protect your phone

Ledger has introduced Ledger Atom, a security device designed to enhance the protection of sensitive digital activities while allowing the use of everyday applications. It operates on an open-source Android platform for regular apps and a security-focused operating system for sensitive operations, utilizing a secure element chip and a field-programmable gate array (FPGA) for communication between the two environments. Ledger Atom features an integration with OpenClaw, an AI agent platform, which allows AI agents to suggest actions but requires physical approval for sensitive operations. It includes a physical privacy switch that cuts power to the device's cameras and microphones, and supports GPG/OpenPGP encryption for messages. Ledger Atom is positioned as a quantum-ready signing device with post-quantum cryptography and anti-tampering measures. Reservations for a limited Founder’s Edition are open at a price of 9, with an expected launch in summer 2027, pending necessary certifications.

Winsage

October 15, 2026

Windows update patches a whopping 1,400 security bugs – including 2 zero days

Microsoft released the October Windows update, addressing over 1,400 vulnerabilities, including 80 critical vulnerabilities and two zero-day exploits. This update is the final supported update for Windows 11 24H2 Home and Pro editions and the first for Windows 11 26H2. Notable enhancements include improvements to File Explorer and refined Bluetooth connectivity. One zero-day vulnerability, CVE-2026-96951, has been exploited in the wild, allowing remote attackers to bypass security protections. The second zero-day, CVE-2026-108398, could enable attackers to circumvent security measures in Microsoft’s .NET Framework. Windows 11 users can install the update via Settings and Windows Update, while Windows 10 users can follow a similar process. Each annual version, such as 24H2, will lose support after 24 months, necessitating an upgrade to Windows 11, version 26H2, for continued security updates. The update also introduces a feature to remap the Copilot key for enhanced user flexibility.

Winsage

October 15, 2026

NVIDIA Freezes Windows 10 GeForce Drivers in October: RTX 40-Series Misses DLSS 5 Support

On October 14, 2026, NVIDIA will release the final GeForce Game Ready Driver for Windows 10, coinciding with the operating system's mainstream end of support. Starting in November 2026, all new Game Ready and Studio Driver releases will only support Windows 11. Approximately 23.56% of Steam gamers were still using Windows 10 as of June 2026. The last Game Ready driver for Windows 10 is version 617.42, released on October 6, 2026. NVIDIA will provide quarterly security updates for Windows 10 GeForce drivers until October 2029, but no new game support or enhancements will be available. Users with RTX 20, 30, 40, and 50 series cards will be affected by this transition, while older models like the GTX 900 and GTX 10 series have already reached their support limits. Windows 10 users will miss out on DLSS 5, which is exclusive to RTX 50-series hardware. Microsoft has extended the free consumer Extended Security Update (ESU) program for Windows 10 to October 12, 2027.

Winsage

October 15, 2026

Microsoft breaks record, fixing 1,416 security flaws. Update Windows now

Microsoft has identified 1,416 vulnerabilities in its systems, with 85 classified as “critical.” Among these, 67 are categorized as remote code execution (RCE) vulnerabilities. One vulnerability is actively exploited, and two have been publicly disclosed. The upcoming Patch Tuesday is on November 10th, 2026, and users are advised to upgrade to Windows 11 25H2 or 26H2. A specific vulnerability, CVE-2026-96951, allows attackers to bypass system defenses by masking the origin of executable files. Microsoft has flagged 42 critical vulnerabilities, including 30 RCE vulnerabilities, which can allow attackers to execute malicious code remotely.

Winsage

October 14, 2026

Microsoft breaks record, fixing 1,416 security flaws. Update Windows now

Microsoft has identified 1,416 vulnerabilities within its systems, with 85 classified as "critical." Among these, 67 are remote code execution (RCE) vulnerabilities. One vulnerability is actively exploited, and two others were disclosed prior to the assessment. The next opportunity for users to address these vulnerabilities will be on November 10th, 2026, during Patch Tuesday. Users are encouraged to upgrade to Windows 11 versions 25H2 or 26H2. A specific vulnerability, CVE-2026-96951, allows attackers to bypass system defenses by masking executable file origins. Of the critical vulnerabilities, 30 are RCE vulnerabilities that enable remote execution of malicious code without authentication or user interaction.