vulnerabilities Archives

Winsage

October 16, 2026

Faster protection, fewer interruptions: How Microsoft Edge is rethinking updates

Microsoft Edge is developing a seamless-updates prototype that allows security updates to be applied without interrupting users' work. Currently, the browser has a Restart to update on idle feature that applies updates when devices are not in use. The goal is to eliminate the need for users to click an update button, enabling background updates that do not disrupt ongoing tasks. Microsoft Edge can also issue patches independently of the Chromium release schedule for urgent security needs. Additionally, Security Update Alerts help organizations manage updates by notifying administrators about critical updates and vulnerabilities. These alerts are available for managed Windows devices through the Edge management service without additional licensing.

Tech Optimizer

October 16, 2026

How to protect your PC from malware

Malware, short for "malicious software," is designed to gain unauthorized access to computers or networks for purposes such as data theft and surveillance. It can be introduced through disguised software or deceptive links. To protect against malware, it is essential to install antivirus software, scan external drives before connecting them, be cautious about downloads, avoid suspicious websites and emails, update applications regularly, enable Tamper Protection on Windows, minimize file sharing, enable Firewall protection, watch out for phishing attacks, and back up data regularly. The future of malware protection may involve leveraging artificial intelligence and machine learning to enhance detection and analysis of threats.

AppWizard

October 16, 2026

Malware Found Pre-Installed In Thousands Of Budget Android Phones – Here’s What We Know

A report from Bitdefender reveals a malware campaign named "Midnight Mimosa" affecting budget and midrange Android smartphones, particularly those using low-energy MediaTek chipsets. This malware, embedded in devices marketed under various labels like Cubot and Doogee, operates through an application called "System" (package name com.android.system.lite) that displays hidden ads and can allow hackers to control the devices. Thousands of devices have been tracked with this malware, with 13% of affected devices located in Mexico, 8% in the United States, and less than 3% in Canada. The malware's source traces back to Android ODM Shenzhen Zediel. Additionally, Bitdefender identified 13 other ad fraud-related apps signed by the same entity that were previously available on the Google Play Store. Major manufacturers like Google, Motorola, and Samsung have security protocols to protect their firmware, unlike the affected budget brands.

AppWizard

October 16, 2026

Ledger unveils $849 device built to protect your phone

Ledger has introduced Ledger Atom, a security device designed to enhance the protection of sensitive digital activities while allowing the use of everyday applications. It operates on an open-source Android platform for regular apps and a security-focused operating system for sensitive operations, utilizing a secure element chip and a field-programmable gate array (FPGA) for communication between the two environments. Ledger Atom features an integration with OpenClaw, an AI agent platform, which allows AI agents to suggest actions but requires physical approval for sensitive operations. It includes a physical privacy switch that cuts power to the device's cameras and microphones, and supports GPG/OpenPGP encryption for messages. Ledger Atom is positioned as a quantum-ready signing device with post-quantum cryptography and anti-tampering measures. Reservations for a limited Founder’s Edition are open at a price of 9, with an expected launch in summer 2027, pending necessary certifications.

Winsage

October 15, 2026

Windows update patches a whopping 1,400 security bugs – including 2 zero days

Microsoft released the October Windows update, addressing over 1,400 vulnerabilities, including 80 critical vulnerabilities and two zero-day exploits. This update is the final supported update for Windows 11 24H2 Home and Pro editions and the first for Windows 11 26H2. Notable enhancements include improvements to File Explorer and refined Bluetooth connectivity. One zero-day vulnerability, CVE-2026-96951, has been exploited in the wild, allowing remote attackers to bypass security protections. The second zero-day, CVE-2026-108398, could enable attackers to circumvent security measures in Microsoft’s .NET Framework. Windows 11 users can install the update via Settings and Windows Update, while Windows 10 users can follow a similar process. Each annual version, such as 24H2, will lose support after 24 months, necessitating an upgrade to Windows 11, version 26H2, for continued security updates. The update also introduces a feature to remap the Copilot key for enhanced user flexibility.

Winsage

October 15, 2026

NVIDIA Freezes Windows 10 GeForce Drivers in October: RTX 40-Series Misses DLSS 5 Support

On October 14, 2026, NVIDIA will release the final GeForce Game Ready Driver for Windows 10, coinciding with the operating system's mainstream end of support. Starting in November 2026, all new Game Ready and Studio Driver releases will only support Windows 11. Approximately 23.56% of Steam gamers were still using Windows 10 as of June 2026. The last Game Ready driver for Windows 10 is version 617.42, released on October 6, 2026. NVIDIA will provide quarterly security updates for Windows 10 GeForce drivers until October 2029, but no new game support or enhancements will be available. Users with RTX 20, 30, 40, and 50 series cards will be affected by this transition, while older models like the GTX 900 and GTX 10 series have already reached their support limits. Windows 10 users will miss out on DLSS 5, which is exclusive to RTX 50-series hardware. Microsoft has extended the free consumer Extended Security Update (ESU) program for Windows 10 to October 12, 2027.

Winsage

October 15, 2026

Microsoft breaks record, fixing 1,416 security flaws. Update Windows now

Microsoft has identified 1,416 vulnerabilities in its systems, with 85 classified as “critical.” Among these, 67 are categorized as remote code execution (RCE) vulnerabilities. One vulnerability is actively exploited, and two have been publicly disclosed. The upcoming Patch Tuesday is on November 10th, 2026, and users are advised to upgrade to Windows 11 25H2 or 26H2. A specific vulnerability, CVE-2026-96951, allows attackers to bypass system defenses by masking the origin of executable files. Microsoft has flagged 42 critical vulnerabilities, including 30 RCE vulnerabilities, which can allow attackers to execute malicious code remotely.

Winsage

October 14, 2026

Microsoft breaks record, fixing 1,416 security flaws. Update Windows now

Microsoft has identified 1,416 vulnerabilities within its systems, with 85 classified as "critical." Among these, 67 are remote code execution (RCE) vulnerabilities. One vulnerability is actively exploited, and two others were disclosed prior to the assessment. The next opportunity for users to address these vulnerabilities will be on November 10th, 2026, during Patch Tuesday. Users are encouraged to upgrade to Windows 11 versions 25H2 or 26H2. A specific vulnerability, CVE-2026-96951, allows attackers to bypass system defenses by masking executable file origins. Of the critical vulnerabilities, 30 are RCE vulnerabilities that enable remote execution of malicious code without authentication or user interaction.

Winsage

October 14, 2026

GLM’s 23 Windows Bug Finds Are Z.ai Building a Security Research Resume

Z.ai's GLM model identified 23 vulnerabilities in the Windows operating system, confirmed by Microsoft's Security Response Center (MSRC). This marks a significant advancement in commercial software security, demonstrating the model's autonomous capability in independent vulnerability discovery. Since the release of GLM-5.2, Z.ai has uncovered over 4,200 vulnerabilities across about 390 open-source projects, with over a thousand categorized as critical to high severity. Z.ai has established a public Security Disclosure Ledger to track its findings through a coordinated disclosure process. The confirmation of vulnerabilities by MSRC is notable due to the rigorous nature of their vulnerability triage operations. Z.ai's GLM-5.3 achieved a score of 84.5% on CyberGym, outperforming competitors like Anthropic's Mythos 5 and OpenAI's GPT-5.6 Sol. Reports indicate that NIST's AI safety division has flagged GLM-5.3 due to concerns about its cyber capabilities, particularly regarding the potential for modified versions to reduce safety features. Z.ai plans to continue targeting commercial software in its efforts.

Winsage

October 14, 2026

Microsoft: Windows 11 24H2 Home and Pro reached end of support

Devices operating on the Windows 11 24H2 Home and Pro editions have reached their end of support as of October 13, 2026, meaning they will no longer receive monthly security updates or non-security preview updates. In contrast, the Windows 11 24H2 Enterprise and Education editions will continue to receive mainstream support until October 12, 2027. Microsoft encourages users to transition to Windows 11 26H2, which will be supported until October 2029. The rollout of Windows 11 26H2 is phased and will expand over the next few months. Additionally, systems running Windows 11 23H2 Enterprise, Education, and IoT Enterprise editions will cease to receive security updates in 30 days after the end of support for Windows 11 23H2 Home and Pro editions in November 2025. Windows Server 2022 has also reached the end of its mainstream support but will remain under extended support until October 2031. Users are advised to upgrade unsupported versions of Windows to continue receiving security updates.