Windows security Archives

Winsage

September 1, 2026

Microsoft explains that it’s fixing a bug in Windows 11’s antivirus that’s happening ‘intermittently’ and is likely to fool people into thinking that Defender is broken

Windows 11's antivirus, Microsoft Defender, is experiencing issues following recent updates, erroneously notifying users that it is turned off despite functioning normally. This glitch has led to persistent alerts prompting users to reactivate the antivirus, causing confusion and frustration. Microsoft has acknowledged the issue on its health dashboard, stating that notifications may appear claiming Microsoft Defender is disabled, even though it is active. This problem has been reported for over a week and may date back to early August, with users advised to check the operational status of their antivirus through Windows Security.

Winsage

August 30, 2026

5 Windows Security Settings You Should Never Skip Over

Microsoft has over 1.4 billion active devices each month, making it a target for security vulnerabilities. Users can enhance their security using built-in features without third-party software. Key security measures include: - Windows Hello: Enables secure login via PIN or biometric methods. Activation steps: Settings > Accounts > Sign-in options > Select method > Set up. - Windows Firewall: Protects against malicious internet traffic. Activation steps: Settings > Privacy & security > Windows Security > Firewall & network protection > Toggle on Microsoft Defender Firewall for Public, Domain, and Private networks. - Microsoft Defender: Pre-installed antivirus solution. Ensure it is operational by enabling Real-time protection and Controlled folder access. Activation steps: Settings > Privacy & security > Windows Security > Virus & threat protection > Manage settings. - Microsoft Account: Linking a Microsoft account provides benefits like cross-device syncing and advanced security features. Steps to link: Settings > Accounts > Your info > Sign in with a Microsoft account. - Device Encryption: Protects sensitive information using BitLocker. Activation steps: Settings > Privacy & security > Device encryption > Toggle on. - Find My Device: Allows users to locate their device if lost. Activation steps: Settings > Privacy & security > Location > Toggle on Location services > Find my device > Toggle on Find my device.

Tech Optimizer

August 30, 2026

‘Antivirus Is Turned Off’—Microsoft Confirms Windows Update Mistake

Microsoft has confirmed that notifications stating “Microsoft Defender Antivirus is turned off” are erroneous and can appear during startup and intermittently, even with notification settings disabled. The issue stems from recent updates to Windows antivirus software, but the antivirus is functioning correctly. This problem affects all versions of Windows or Windows Server running Microsoft Defender Antivirus with the latest updates. Users may see pop-ups urging them to “Turn on virus protection,” which falsely suggest that protection is disabled. Microsoft is working on a resolution, and users are advised to verify that their antivirus is operational and that real-time protection is enabled.

Winsage

August 28, 2026

Microsoft rolls out fix for Windows 11 crashes, gaming issues

Microsoft has begun rolling out a permanent solution to a system stability and gaming performance issue on Windows 11 devices, which has caused crashes, game launch failures, and freezing, often with the "EXCEPTIONACCESSVIOLATION" error message. The problem was linked to updates from August 2026 and was identified as being related to peripherals with RGB lighting features that installed disruptive drivers. Specifically, the inpoutx64.sys driver was found to be responsible for these disruptions. Microsoft is deploying a fix that disables this driver on affected systems, starting from August 26, 2026. This driver block will also be included in the September 2026 Windows security updates. For enterprise-managed devices, a temporary workaround involves manually disabling the inpoutx64 driver via the Windows Registry. Microsoft has assured users that this action should not cause unintended behavior and can be reversed.

Winsage

August 28, 2026

Microsoft rolls out fix for Windows 11 crashes, gaming issues

Microsoft has begun rolling out a permanent solution to a problem causing system crashes and gaming disruptions on Windows 11 devices, specifically related to game launch failures and freezing with "EXCEPTIONACCESSVIOLATION" errors. The issue affects various games, including ARC Raiders, MARVEL Tōkon: Fighting Souls, and The Finals, particularly on Windows 11 versions 24H2 and 25H2, and is linked to peripherals with built-in RGB lighting. The inpoutx64.sys driver has been identified as the cause of these complications. Microsoft is deploying a fix that disables this driver on affected devices, starting on August 26, 2026, and it may take up to 24 hours to reach all impacted devices. This driver block will also be included in the September 2026 Windows security updates. For enterprise-managed devices that do not automatically receive the fix, a temporary workaround involves disabling the inpoutx64 driver via the Windows Registry. Microsoft has stated that disabling this registry key should not lead to unintended behavior.

Winsage

August 28, 2026

Microsoft “Resolves” Windows 11 Crashing Games with a Registry Hack

Late last week, reports emerged about gameplay disruptions linked to the Windows 11 August update, causing issues like forced crashes, unexpected freezing, and device restarts. Microsoft identified the interaction between gaming applications and RGB peripherals as the cause. They released a workaround involving a registry modification to prevent the inpoutx64 driver from loading, which resolved the issue temporarily. This workaround specifically targets devices with the inpoutx64 driver enabled and the game ARC Raiders installed. Users can disable the driver by modifying the registry key HKEYLOCALMACHINESYSTEMCurrentControlSetServicesinpoutx64, changing the Start value to 4, and restarting the computer. Microsoft is also working to block RGB peripherals for the game MARVEL Tōkon: Fighting Souls and has addressed similar issues for THE FINALS. The driver block will be included in the September 2026 Windows security updates and future releases.

Tech Optimizer

August 26, 2026

How to Protect Against Ransomware: 13 Steps [2026]

Global ransomware attacks increased by 0.8% quarter-over-quarter in Q2 2026. The group Qilin has 279 confirmed victims, maintaining its position as the leading threat actor for four consecutive quarters. The rival group The Gentlemen saw a 62% increase in victims, reaching 269. Checkpoint Research's report indicates a shift in the ransomware landscape, challenging the narrative of declining attacks. IBM's analysis shows breaches within supply chains and third-party vendors have quadrupled over the past five years. Effective ransomware protection requires administrative access to endpoints, firewalls, and backup systems, along with specific software versions and tools. The 3-2-1-1-0 backup strategy is recommended, emphasizing offline, immutable backups. Organizations should implement multi-factor authentication (MFA) across all access points and actively patch known vulnerabilities. Network segmentation is crucial to limit ransomware spread, and canary files can provide early warnings of attacks. Regular phishing simulations and a well-documented incident response plan are essential for preparedness.

Tech Optimizer

August 22, 2026

Best Ransomware Protection 2026: Tested and Ranked

Ransomware protection is best approached as a layered strategy rather than relying on a single solution. The effectiveness of software is significantly enhanced by maintaining a well-managed backup that is disconnected during an attack. Five tools were evaluated based on their default settings, focusing on behavioral detection, protected folders, file rollback, and real-time protection. 1. Norton 360: Rated as the best overall ransomware protection, it offers comprehensive features including behavioral monitoring, protected folders with dual alert modes, and 50 GB of cloud backup within a single subscription. It has a perfect score in advanced threat assessments. 2. Bitdefender: Recognized for its file rollback and remediation capabilities, it provides an effective "undo" feature that restores files, although this feature is turned off by default. 3. Avast One Free: The best free ransomware protection option, it includes a dedicated shield on the free Windows tier and has achieved a perfect score in advanced threat assessments. 4. NordVPN Threat Protection Pro: Best for blocking the delivery route of ransomware, it prevents downloads before encryption starts but cannot stop the process once it has begun. 5. McAfee: Best for protecting multiple devices simultaneously, it offers unlimited device coverage on most plans with integrated ransomware defense in its scanning engine. Modern ransomware protection software has shifted from signature matching to focusing on monitoring the behavior of processes interacting with files. The four essential layers of protection include behavioral monitoring, protected folders, automatic file rollback, and backup. Most users do not need a separate anti-ransomware product, as these features are typically included in main antivirus suites, with the key consideration being whether these features are activated. The rankings of the tools were based on whether the ransomware protection layer is enabled by default, the extent of file recovery when intervention occurs, and the frequency of false positives during normal use. - Norton 360: Best overall, with protection enabled by default and a perfect score in advanced threat testing. - Bitdefender: Best for file rollback, but the rollback feature is disabled by default. - Avast One Free: Best free option, with a perfect score in advanced threat assessments but lacks rollback capabilities. - NordVPN Threat Protection Pro: Effective at blocking malware downloads but does not provide rollback or backup features. - McAfee: Suitable for families with multiple devices, offering automatic backup of flagged files but lacks user-configurable protected folder options. The effectiveness of ransomware protection tools is primarily assessed through behavioral responses rather than library matching. Backup remains a critical layer of defense, functioning even when other layers fail.

Winsage

August 21, 2026

A Recent Windows 11 Update Is Causing Game Crashes And All Kinds Of Other Problems

A recent Windows 11 update, KB5121003, released on August 11, has caused issues such as game crashes, login errors, display problems, and system failures, particularly affecting popular games like ARC Raiders and The Finals. The update was intended to enhance security by addressing over 400 vulnerabilities but introduced bugs instead. Embark Games is working on a solution and has advised users to disable a problematic driver or remove the patch, which would leave systems vulnerable. Microsoft is investigating the situation and encourages users to report issues through the Feedback Hub.

Winsage

August 20, 2026

ShieldBreak: The Windows Defender Zero-Day With No Patch — Detect It, Mitigate It, With Qualys

ShieldBreak, identified as CVE-2026-69414, is a zero-day vulnerability in the Microsoft Malware Protection Engine that allows low-privileged local attackers to escalate privileges to SYSTEM. The public proof of concept was released on August 12, 2026, and Microsoft recognized the CVE on August 14, 2026. No patch is currently available. ShieldBreak exploits an elevation-of-privilege vulnerability by manipulating file processing during the cloud-file hydration process in Microsoft Defender, allowing attackers to control processes with elevated privileges. The exploit is functional on Windows 11 25H2 and Windows Server 2025. Qualys VMDR can detect this vulnerability using a specific query, and organizations can use Qualys TruRisk™ Eliminate for mitigation until a patch is released.