Windows operating systems Archives

Winsage

June 16, 2025

Microsoft accidentally swapped Windows 11’s startup sound with Vista’s

Users of the Windows 11 Dev Channel have experienced a glitch in build 26200.5651, where the boot sound has been mistakenly replaced with the Windows Vista chime. This error is linked to the imageres.dll file, and Microsoft has acknowledged it in the release notes, stating they are working on a fix. Brandon LeBlanc from the Windows Insider team humorously commented on the situation, while community reactions have included amusement and nostalgia regarding the Vista boot sound.

Winsage

June 13, 2025

Make the most of Windows 11: Tips and tools to improve focus, multitasking, and daily productivity

Windows 11 is the most widely used desktop operating system globally, offering features to enhance productivity. Focus Sessions allow users to work in intervals, with session lengths ranging from 30 minutes to four hours, including breaks. Users can access this feature through the Clock app and can quickly start a 30-minute focus block using Win + N. The Do Not Disturb (DND) feature silences alerts from apps and notifications, helping users concentrate. DND can be activated by clicking the clock in the taskbar or using Win + N, and users can customize which notifications are allowed through the settings. Windows 11 provides three power modes: Best Performance, Balanced, and Best Power Efficiency. Users can modify these settings in the Power & Battery section of the settings, and Energy Saver can be activated quickly from the Quick Settings panel when the battery is low.

Winsage

June 12, 2025

Windows Task Scheduler Vulnerability Let Attackers Escalate Privileges

A critical security vulnerability, designated as CVE-2025-33067, has been identified in the Windows Task Scheduler, allowing attackers to escalate privileges to SYSTEM level access without prior administrative rights. This vulnerability is rated as "Important" with a CVSS score of 8.4 and is due to improper privilege management within the Windows Kernel’s task scheduling component. It affects multiple Windows versions, including Windows 10 (Versions 1607, 1809, 21H2, 22H2), Windows 11 (22H2, 23H2, 24H2), and Windows Server 2016-2025. Microsoft released security updates on June 10, 2025, to address this flaw across 27 different Windows configurations. The vulnerability requires local system access, no prior privileges, and no user interaction, making it particularly dangerous. Security researcher Alexander Pudwill discovered and disclosed the vulnerability.

Winsage

June 5, 2025

What changes are European regulations bringing to Windows?

Microsoft is implementing significant changes to its Windows operating systems in response to the European Union's Digital Markets Act (DMA), which took effect in March 2024. Starting in June 2025, Windows 10 and 11 users in the European Economic Area (EEA) will have the option to uninstall pre-installed applications, including the Windows Store. The process for setting third-party browsers, such as Chrome or Firefox, as the default will be simplified, moving away from the default Edge browser. Microsoft will also stop incentivizing users to switch to Edge by removing pop-up prompts. Additionally, users will be able to select alternative news feeds within taskbar widgets. These changes aim to enhance user control and promote competition within the Windows ecosystem.

Winsage

May 29, 2025

Forced E-Waste PCs And The Case Of Windows 11’s Trusted Platform

The process of upgrading Windows operating systems was straightforward until Windows 11, which introduced a new requirement for a Trusted Platform Module (TPM), potentially rendering many capable PCs obsolete. The TPM is used for boot validation and storing biometric data, but it complicates data recovery and may lock out legitimate users. Users have found ways to bypass Windows 11's TPM and CPU restrictions, allowing installation on unsupported hardware. Microsoft’s enforcement of these requirements remains uncertain, raising concerns about system reliability and user access to updates. Many users are opting to stay on Windows 10 while advocating for continued support from developers.

Winsage

May 29, 2025

Microsoft Confirms New Update Failure For Windows Users

Microsoft is investigating issues with Windows 11 versions 22H2 and 23H2 related to the May 13, 2025 security update (KB5058405), which has caused installation failures. Users are encountering a recovery error stating, “Your PC/Device needs to be repaired,” linked to the ACPI.sys driver, with the error code 0xc0000098. This issue affects not only personal computers but also virtual environments, including Azure Virtual Machines and Citrix or Hyper-V hosted machines. Earlier, Microsoft addressed similar problems for Windows 10 users experiencing BitLocker Recovery screens during the installation of the same security update. Microsoft has released the KB5061977 out-of-band update for Windows 11 in response to these ongoing challenges.

Tech Optimizer

May 21, 2025

Defendnot Disarms Windows Defender by Pretending to Be a Friend

A newly developed security program called Defendnot can deceive and disable Windows Defender, even without legitimate antivirus software installed. It alters the system to appear as a genuine antivirus program, allowing hackers to neutralize Windows Defender's protective measures. Defendnot operates through an undocumented API that antivirus software uses to register with the Windows Security Center, causing Microsoft Defender to deactivate. Developed by security researcher es3n1n, Defendnot injects a DLL file into the Taskmgr.exe process, misleading Windows into believing an antivirus is present. Although created for research purposes, it can be misused by cybercriminals. Microsoft Defender recognizes Defendnot as a Trojan and quarantines it upon detection.

Tech Optimizer

May 19, 2025

This new Defendnot trojan can get Windows to disable its own antivirus software

A researcher using the pseudonym es3n1n has created a tool called Defendnot that manipulates Windows operating systems to disable Microsoft Defender, making devices vulnerable to malware. Defendnot simulates the presence of a legitimate antivirus by using an undocumented API in the Windows Security Center, convincing Windows that a valid antivirus is installed. This development raises concerns about cybersecurity, as it undermines the effectiveness of built-in antivirus protections like Windows Defender.

Winsage

May 15, 2025

Windows Remote Desktop Vulnerability Let Attackers Execute Malicious Code Over Network

Microsoft's May 2025 Patch Tuesday addressed 72 vulnerabilities in Windows Remote Desktop services, including two critical vulnerabilities, CVE-2025-29966 and CVE-2025-29967, which are heap-based buffer overflow issues. These flaws allow unauthorized attackers to execute arbitrary code over a network, posing significant risks. The vulnerabilities have been rated as "Critical" and classified under CWE-122. They affect various versions of Windows operating systems utilizing Remote Desktop services. Although there have been no reported active exploitations, experts warn of the potential dangers, urging users to apply patches immediately. The update also addressed five actively exploited zero-day vulnerabilities in other Windows components. Patches are available through Windows Update, WSUS, and the Microsoft Update Catalog.

Winsage

May 14, 2025

Microsoft fixes Linux boot issues on dual-boot Windows systems

Microsoft addressed a boot issue affecting dual-boot systems running Linux alongside Windows after the August 2024 Windows security updates, which caused Linux systems to fail to boot due to a Secure Boot Advanced Targeting (SBAT) update. This issue impacted various Windows operating systems, including Windows 10, Windows 11, and Windows Server 2012 and later. The problem arose from a detection mechanism that failed to recognize some customized dual-boot setups, leading to error messages such as "Something has gone seriously wrong: SBAT self-check failed: Security Policy Violation." Microsoft confirmed that the boot issues would be resolved with the May 2025 Patch Tuesday security updates and provided a temporary workaround in late August, advising users to delete the SBAT update. On September 19, Microsoft stopped the automatic application of the problematic SBAT update and recommended a command to prevent future SBAT updates. The issue was specific to the August 2024 security and preview updates, and subsequent updates starting with September 2024 did not contain the problematic settings.