Windows security Archives

Winsage

August 10, 2026

Windows 11 26H2 Ships as an Enablement Package With Movable Taskbar, Local Search, and Default Cloud Recovery

Windows 11 version 26H2 is expected to launch around October 2026 as a small enablement package using the same Germanium platform as versions 24H2 and 25H2. Key enhancements include a movable taskbar, expanded Start menu controls, deeper Copilot integration, and new default cloud recovery settings for managed PCs. Users on versions 24H2 or 25H2 will experience a quick upgrade process requiring only one reboot. The taskbar will allow repositioning and smaller icon sizes, and the Start menu will have new configuration options and privacy settings. Search functionality will prioritize local content, with an option to disable web results. The update will enhance cloud-assisted setup and recovery for eligible Microsoft Entra devices, enabling automatic backup of settings and app lists. Copilot will be integrated into Search and File Explorer, and Windows Security will improve Administrator Protection. The support timeline for 26H2 will reset, offering 24 months for Home and Pro editions and 36 months for Enterprise and Education editions. Hardware requirements remain unchanged, and Arm devices on Windows 11 26H1 will not receive the 26H2 update.

Winsage

August 8, 2026

Windows 11 26H2 is a small update with big quality-of-life improvements, expected around October 2026

Windows 11 will undergo a significant transformation with the upcoming annual update, version 26H2, which introduces enhancements to the interface, search functionality, backup processes, and AI integration. The update will allow users to reposition the taskbar to any edge of the screen and adopt a smaller layout with reduced icon sizes. The Start menu will have new configuration options and a privacy feature for hiding account details during screen sharing. Search functionality will prioritize local content over web results, with an option to disable web results entirely. Cloud-assisted setup and recovery will become a default setting for eligible Microsoft Entra devices, automatically saving configuration settings and app lists. Copilot will be more integrated into daily operations, including a dockable side panel in File Explorer. Updates will also be made to traditional system tools, including a modernized Run dialog and enhanced security for administrator-level operations. The support timeline for Windows 11 installations will reset, with Home and Pro editions receiving 24 months of support and Enterprise and Education editions receiving 36 months. The hardware requirements remain unchanged, and the rollout of 26H2 is anticipated in the latter half of 2026, likely around October.

Tech Optimizer

August 3, 2026

Best Free Antivirus Software

Microsoft Defender is the primary recommendation for most Windows users, as it is integrated into Windows and receives regular updates. Other antivirus options include: - Bitdefender Antivirus Free: A streamlined, Windows-only option with automatic protection after installation. - Avast One Free: A cross-platform suite with a custom scan creation feature. - AVG AntiVirus Free: A traditional free antivirus for personal and family use with an initial scan built into the installation. - Avira Free Security: Offers virus scanning and protection for private non-commercial use. - Malwarebytes Free: A manual cleaner for on-demand scanning and cleaning. - ZoneAlarm Free Antivirus: Combines antivirus with configurable firewall controls for Windows. - ClamAV: An open-source scanning toolkit with command-line tools. The selection process focused on the availability of free products, vendor support, and the specific roles of each software, distinguishing between full-time antivirus tools and on-demand scanners. Recommendations include using Microsoft Defender for Windows 10/11, Bitdefender for simplicity, Avast or AVG for fuller apps, Avira for private home use, Malwarebytes for manual cleaning, ZoneAlarm for firewall controls, and ClamAV for technical scanning.

Winsage

July 29, 2026

Missed Windows 11 Secure Boot? Don’t panic, Microsoft is still pushing it in the coming months

Microsoft reassured Windows 11 and Windows 10 users that their PCs will continue to boot normally and receive updates even if they have not yet received the new Secure Boot 2023 certificates. The rollout of these certificates is expected to continue over the upcoming months. The initial Secure Boot certificate expired on June 24, 2026, and Microsoft has been replacing older 2011 certificates since 2024. The latest update, KB5101650, transitioned Windows 11 to OS builds 26200.8875 and 26100.8875 for versions 25H2 and 24H2, respectively. The 2023 certificates replace older certificates with modern cryptographic standards, allowing Microsoft to deliver DBX revocation updates without interruption. Devices using the 2011 KEK can only receive DBX updates signed with that key, which is no longer valid after June 24. Microsoft has been rolling out the 2023 certificates for the past two years, and many devices remained in a yellow or red status by the June deadline. To check Secure Boot status, users can navigate to Windows Security > Device Security. A green checkmark indicates successful application of the certificates, while yellow and red alerts indicate compatibility issues or firmware incompatibility. PCs that are older or operating in Legacy BIOS mode will not receive the updates. Windows 10 also receives Secure Boot updates, but enrollment in Extended Security Updates (ESU) is required.

Winsage

July 27, 2026

Microsoft moves to end pirated Windows activations

Microsoft is introducing the KMS Hardware Secured system to enhance Windows licensing security by making unauthorized activation methods more difficult. This system will use TPM-based attestation to authenticate the server managing activation requests, ensuring only legitimate devices are recognized. Readiness notifications for Windows Server 2025 will begin in August 2026, allowing administrators to prepare for the transition to TPM-based attestation, which is expected to become a requirement for KMS activation in a future Windows Server release. This initiative targets corporate clients using Windows volume licensing to complicate unauthorized activation. Additionally, Microsoft plans to reduce its workforce by approximately 4,800 positions, or nearly 2.1% of its global staff, as part of a corporate transformation strategy.

Winsage

July 26, 2026

Are you the family’s tech support? This Windows security checklist helped put an end to late night panic texts.

- A text message from the author's father prompted a discussion about using a password manager for cybersecurity. - The author's mother had a previous concern about an unexpected "tech support" notification on her computer. - The author created a cybersecurity best practices document to help their parents and others with technology. - Key security vulnerabilities to address include enabling Windows Hello, ensuring Windows Update is running, confirming Windows Defender is on, and turning on the 'Find my Device' feature. - One-time security measures recommended are switching from a local account to a Microsoft account with two-factor authentication, enabling device encryption, switching from a Windows 11 Administrator account to a Standard account, and using a password manager. - Good cybersecurity habits include learning to spot phishing scams, being cautious of unsolicited tech support calls, and avoiding the installation of unsolicited software.

Winsage

July 26, 2026

How I stopped being my parents’ emergency IT hotline — The complete list of Windows Security settings I made them fix once and for all

A family member inquired about the necessity of a password manager, reflecting growing cybersecurity concerns. A parent received a suspicious "tech support" message, indicating potential security risks. Windows Hello allows users to log in with a PIN, fingerprint, or facial recognition on Windows 11 PCs. Users can set it up via Settings > Accounts > Sign-in options. Regular updates through Windows Update are essential for security, and users can check their status in Settings > Windows Update. Windows Defender is the built-in antivirus for Windows 11, typically enabled by default, but users should verify its status in Settings > Privacy & security > Windows Security > Virus & threat protection. The 'Find My Device' feature can be enabled in Settings > Privacy & security > Find my device to track and lock a lost or stolen laptop. Switching from a local account to a Microsoft account with two-factor authentication (2FA) enhances security, accessible via Settings > Accounts > Your info. Device encryption can protect sensitive data, available in Settings > Privacy & security > Device encryption for Home versions and BitLocker for Pro versions. Using a Standard account instead of an Administrator account reduces malware risks, managed through Settings > Accounts > Family. Password managers like NordPass, 1Password, and Bitwarden help generate strong, unique passwords for accounts. Users should learn to spot phishing scams, be cautious of unsolicited tech support calls, and avoid installing software suggested by unknown callers to maintain cybersecurity.

Tech Optimizer

July 26, 2026

How to Stop McAfee from Running on Windows

McAfee offers features such as file scanning, network traffic filtering, VPN services, and browser warnings to protect users. Users can pause Real-Time Scanning by opening the McAfee app, selecting Real-Time Scanning under My Protection Widgets, and turning it off. To disable the Advanced Firewall, users must access the Advanced Firewall section in the app and turn it off. Scheduled scans can be stopped by navigating to Scheduled Scans in the app and clicking Turn off. To prevent Secure VPN from reconnecting, users can toggle it off in the Home tab and set Auto Connect to Never connect automatically. Browser protection features can be managed by toggling off McAfee WebAdvisor in Chrome, Edge, and Firefox. Users can block fake McAfee popups by adjusting notification settings in their browsers. To prevent McAfee startup helpers from opening, users can manage startup settings in Windows. To completely remove McAfee, users should uninstall it through Settings or Control Panel and follow the prompts. If remnants remain, the MCPR tool can be used for complete removal. Microsoft Defender will reactivate automatically after McAfee is uninstalled.

Winsage

July 26, 2026

Microsoft is using TPM chips to crack down on pirated Windows activations

Microsoft has mandated the inclusion of the Trusted Platform Module (TPM) as a standard feature in all new motherboards and CPUs to enhance the Windows activation process. The company has introduced an enhancement to its Key Management Service (KMS) that leverages TPM's security capabilities to authenticate the legitimacy of KMS servers. This new "TPM-based attestation" aims to mitigate exploitation risks associated with KMS by validating the cryptographic integrity of KMS servers. Starting in August 2026, TPM-based attestation will be required for KMS activation with the next release of Windows Server. Microsoft has also closed off the "KMS38" activation method in 2025, while traditional KMS activation remains functional. The Massgrave collective has developed an Online KMS method that may be impacted by the new TPM-based attestation.

Winsage

July 24, 2026

Microsoft shares some details on Azure outage that blocked Windows 11 update downloads

This week, Meta experienced a global outage affecting Facebook users, followed by Microsoft facing performance issues with its M365 services, including Teams and SharePoint. Microsoft also reported difficulties with Azure, impacting Windows 11 updates and the Microsoft Store. The issues began around 11:15 AM PST on July 23, 2026, with a notification to users about the Azure outage affecting Windows Update and related services. Microsoft initiated recovery efforts and by 1:45 PM PST, announced that the issues were resolved and services were restored. Currently, there are no ongoing issues reported on the Microsoft Service Health Status page, but the incident is documented on the Windows Release Health page.