Windows 11 systems Archives

Winsage

August 12, 2026

ShieldBreak: New Windows Zero-Day Bypasses Microsoft’s RoguePlanet Patch

Chaotic Eclipse, a security researcher, has revealed a proof-of-concept (PoC) for a new vulnerability called ShieldBreak, which is a zero-day flaw in Microsoft Defender that bypasses the patch for the previously identified CVE-2026-50656 (RoguePlanet). This vulnerability could allow attackers to execute code at the SYSTEM level on affected Windows systems. Chaotic Eclipse tested the PoC on the latest versions of Windows 11 and Windows Server 2025, achieving a 100% success rate. Windows 10 and its server editions are not supported by the PoC but remain vulnerable. Microsoft had issued security updates for RoguePlanet, which has a CVSS score of 7.8, affecting the Malware Protection Engine and representing a local privilege escalation issue. Chaotic Eclipse has previously disclosed two other zero-day vulnerabilities, YellowKey and GreenPlasma, which affect BitLocker and the Windows Collaborative Translation Framework, respectively. Microsoft criticized the public disclosure of these vulnerabilities as irresponsible and emphasized the importance of Coordinated Vulnerability Disclosure.

Winsage

August 9, 2026

x64 port of Microsoft Word for Windows 1.1a arrives — you can now run this seminal 1990 word processor natively in Windows 11

A developer named JMarshall23 has ported Microsoft Word for Windows 1.1a to x64 architecture, allowing it to run natively on Windows 11. This port uses the original source code and resources, with modern adaptations to address the limitations of the 16-bit assembly and segmented-memory architecture. Microsoft Word for Windows 1.1a was originally launched over 25 years ago and introduced features like WYSIWYG editing, graphics incorporation, and table insertion. Microsoft has made the source code publicly available through the Computer History Museum, which includes a 7MB bundle with C source files, x86 assembly, build tools, and documentation. Users need the Windows 11 SDK, CMake 3.25 or newer, and PowerShell to build and run this version. The code release is governed by a license that permits only non-commercial use, restricting software redistribution.

Winsage

August 8, 2026

Developer ported Word for Windows 1.1a from 1990 to run natively on Windows 11

Microsoft Word has evolved from a basic text editor in the 1980s to an AI-enhanced platform capable of generating text autonomously. Developer Justin Marshall has revived Microsoft Word for Windows 1.1a, originally released in 1990, using the open-source code made available by Microsoft in 2014. This version has been crafted into a native 64-bit Windows executable, allowing users to run it on Windows 11 without emulators. The interface is stripped of modern features, offering a simple sheet of paper and basic formatting tools reminiscent of early Windows design. Marshall has a history of reviving classic software and has other projects showcased on his GitHub page. Word for Windows 1.1a is available for download for those interested in experiencing early word processing.

Winsage

August 2, 2026

Windows 11: Movable and Smaller Taskbar in Beta Test

Microsoft is expanding the testing of its redesigned taskbar for Windows 11 to the Beta Channel of the Windows Insider Program with the release of Beta Build 26220.9022 on July 31, 2026. This update allows selected participants to reposition the taskbar along any edge of the screen—top, left, right, or bottom—and introduces a more compact variant that reduces icon size and overall height. Users can adjust their taskbar position through the Settings menu under Personalization, and Windows will adapt associated flyouts and animations accordingly. The implementation aims to restore flexibility lost when Windows 11 was launched, where the taskbar was fixed to the bottom of the screen. However, some features remain under development, and limitations exist for alternative positions, including incomplete touch gestures and a simplified search box. The compact taskbar feature currently only supports reduced height at the top or bottom positions. Microsoft is also exploring taskbar positioning across multiple monitors but has not guaranteed different positions for each screen. The recent updates include renewed certificates for the Windows Insider Program and additional builds, with the timeline for stable release of these taskbar adjustments still uncertain.

Winsage

July 29, 2026

Missed Windows 11 Secure Boot? Don’t panic, Microsoft is still pushing it in the coming months

Microsoft reassured Windows 11 and Windows 10 users that their PCs will continue to boot normally and receive updates even if they have not yet received the new Secure Boot 2023 certificates. The rollout of these certificates is expected to continue over the upcoming months. The initial Secure Boot certificate expired on June 24, 2026, and Microsoft has been replacing older 2011 certificates since 2024. The latest update, KB5101650, transitioned Windows 11 to OS builds 26200.8875 and 26100.8875 for versions 25H2 and 24H2, respectively. The 2023 certificates replace older certificates with modern cryptographic standards, allowing Microsoft to deliver DBX revocation updates without interruption. Devices using the 2011 KEK can only receive DBX updates signed with that key, which is no longer valid after June 24. Microsoft has been rolling out the 2023 certificates for the past two years, and many devices remained in a yellow or red status by the June deadline. To check Secure Boot status, users can navigate to Windows Security > Device Security. A green checkmark indicates successful application of the certificates, while yellow and red alerts indicate compatibility issues or firmware incompatibility. PCs that are older or operating in Legacy BIOS mode will not receive the updates. Windows 10 also receives Secure Boot updates, but enrollment in Extended Security Updates (ESU) is required.

Winsage

July 22, 2026

Still on Windows 10? You’re carrying 3x the security risk of Windows 11

A study by Lansweeper found that Windows 10 PCs have an average of 1,903 active security vulnerabilities, while Windows 11 systems have only 652 vulnerabilities. As of June 2026, nearly 20% of Windows PCs in the U.S. are still using Windows 10, despite Microsoft ceasing regular updates for it. Users can enroll in the Extended Security Updates (ESU) program for continued security updates until October 12, 2027. Security experts have urged users to upgrade to Windows 11 due to increasing vulnerabilities in Windows 10, while some data privacy experts recommend staying with Windows 10 for as long as possible.

Winsage

July 22, 2026

You can stop LG monitors that are reportedly installing bloatware on your Windows 11 PC, but the fix shouldn’t require this much effort

LG monitors are reportedly installing unwanted software, specifically McAfee bloatware, on Windows 11 systems without user consent when connected. This issue has been highlighted by Windows Latest, and the changelog of LG's monitor app on the Microsoft Store confirms the installation. A complex workaround exists for users to remove the software.

Winsage

July 20, 2026

July 2026 Patch Tuesday: KB5101650 Windows 11 Update

On July 14, 2026, Microsoft released cumulative update KB5101650 for Windows 11 versions 25H2 and 24H2, addressing OS Builds 26200.8875 and 26100.8875. This update includes essential security fixes, updates to Secure Boot certificates, and enhanced Remote Desktop Protocol (RDP) defenses against phishing attacks. It consolidates July 2026's security content, addressing known vulnerabilities and introducing functional improvements. The update is critical for minimizing exposure to identified threats and is prioritized for systems managing remote access or nearing certificate expiration. The update enhances Remote Desktop security by supporting SHA-2 certificate thumbprints while retaining SHA-1 for legacy compatibility. It includes new Group Policy options to mitigate phishing risks associated with malicious .rdp files. The curl upgrade to version 8.21.0 incorporates security patches for command-line tools in Windows environments. Secure Boot certificates are automatically updated through Windows updates, ensuring boot security across various hardware. KB5101650 installs primarily through the Windows Update interface, requiring a restart to activate changes. Enterprise environments can use the Microsoft Update Catalog for manual distribution. A temporary restriction affects certain Dell devices with Intel Innovation Platform Framework drivers, which Microsoft plans to address in a future update. The cumulative update resolves a total of 622 Microsoft CVEs, including 416 affecting Windows components. Users are advised to verify and install the update promptly to secure the full suite of improvements.

Tech Optimizer

July 11, 2026

Microsoft closes RoguePlanet vulnerability in Defender: SYSTEM privileges via the antivirus engine

A vulnerability known as RoguePlanet was identified in Microsoft Defender, tracked as CVE-2026-50656. This flaw allows local privilege escalation to the NT AUTHORITYSYSTEM account, requiring an attacker to have local code execution capabilities. It can be exploited through methods such as opening malicious email attachments. The vulnerability is categorized under CWE-59: “Improper Link Resolution Before File Access” and involves a race condition that affects the Defender engine's operations. RoguePlanet was disclosed by security researcher Nightmare-Eclipse on June 10, 2026, and confirmed by various security firms. Microsoft released a fix in version 1.1.26060.3008 of the Microsoft Malware Protection Engine, which should be installed automatically in standard Windows configurations. Users can verify their engine version using PowerShell. The vulnerability affects both Windows 10 and Windows 11 systems with the June 2026 security updates, and disabling real-time protection does not reliably mitigate it.

Winsage

July 10, 2026

Patch for Windows Defender 0-day could allow attackers to fill hard disk

A recent Microsoft patch addressing the RoguePlanet vulnerability (CVE-2026-50656) in its Defender security engine has raised concerns about disk space issues for Windows users. The vulnerability allows remote attackers to gain administrative control over Windows 10 and 11 systems. The patch, which updates the Microsoft Malware Protection Engine, is automatically installed without user action. However, it may enable attackers to fill a hard drive by writing excessive data due to changes in the mpengine.dll driver. These changes can cause a data leak of 8 bytes when opening a file and involve new functionalities in SpyNet, which could lead to mass file-writing behavior. Typically, Defender limits file sizes during scanning, but the spynet functions may maintain a local copy of the Zone.Identifier Alternate Data Stream file, potentially exhausting disk space.