Windows Server Archives

Tech Optimizer

August 30, 2026

‘Antivirus Is Turned Off’—Microsoft Confirms Windows Update Mistake

Microsoft has confirmed that notifications stating “Microsoft Defender Antivirus is turned off” are erroneous and can appear during startup and intermittently, even with notification settings disabled. The issue stems from recent updates to Windows antivirus software, but the antivirus is functioning correctly. This problem affects all versions of Windows or Windows Server running Microsoft Defender Antivirus with the latest updates. Users may see pop-ups urging them to “Turn on virus protection,” which falsely suggest that protection is disabled. Microsoft is working on a resolution, and users are advised to verify that their antivirus is operational and that real-time protection is enabled.

Winsage

August 28, 2026

Microsoft Issues Windows 11 Version 26H2 to Release Preview

Microsoft has released Windows 11 version 26H2 (Build 26300.9278) in the Release Preview Channel for customers to preview ahead of its general availability later this year. This version will be delivered as an enablement package, allowing for seamless integration of new features and enhancements. Users with PCs in the Release Preview channel can manually install this version. Key features for business users include Windows Backup, app actions from the Taskbar, and improvements to File Explorer. Organizations can deploy Windows 11 version 26H2 using Windows Update client policies and Windows Server Update Services (WSUS). Updates to the ISOs on the Windows Insider Program download site will also reflect this new version.

Tech Optimizer

August 26, 2026

How to Protect Against Ransomware: 13 Steps [2026]

Global ransomware attacks increased by 0.8% quarter-over-quarter in Q2 2026. The group Qilin has 279 confirmed victims, maintaining its position as the leading threat actor for four consecutive quarters. The rival group The Gentlemen saw a 62% increase in victims, reaching 269. Checkpoint Research's report indicates a shift in the ransomware landscape, challenging the narrative of declining attacks. IBM's analysis shows breaches within supply chains and third-party vendors have quadrupled over the past five years. Effective ransomware protection requires administrative access to endpoints, firewalls, and backup systems, along with specific software versions and tools. The 3-2-1-1-0 backup strategy is recommended, emphasizing offline, immutable backups. Organizations should implement multi-factor authentication (MFA) across all access points and actively patch known vulnerabilities. Network segmentation is crucial to limit ransomware spread, and canary files can provide early warnings of attacks. Regular phishing simulations and a well-documented incident response plan are essential for preparedness.

Winsage

August 25, 2026

Windows XP was released to manufacturing a quarter of a century ago

Windows XP was released to manufacturing on August 24, 2001, marking a shift from the Windows 9x codebase. It succeeded Windows 2000 for professionals and Windows ME for home users, becoming known for its reliability and user-friendly interface. At launch, it was available in two editions: Home and Professional. Extended support ended on April 8, 2014, but it continued to be used in various sectors, including Windows Embedded POSReady 2009, which saw support end in April 2019. Microsoft issued a patch for XP in May 2019 to address vulnerabilities. By the end of 2016, 90 percent of the UK's NHS was still using XP, and the Reserve Bank of India set a 2019 deadline for phasing it out from ATMs. Some in the global banking sector continued to operate on Windows Server 2003. Windows XP became widely available in retail in October 2001.

Winsage

August 25, 2026

Microsoft: August updates break printing, PDF export in WPF apps

Microsoft has acknowledged a significant issue with the .NET Framework updates from August 2026, causing disruptions in printing and PDF export functionalities in certain applications, particularly those using the Windows Presentation Foundation (WPF) UI framework. After installing the update, some WPF applications may encounter a System.IO.FileFormatException when printing or generating PDF/XPS content with specific fonts, including Calibri. This issue affects various platforms, including Windows 10, Windows 11, and Windows Server editions from 2012 to 2025. Microsoft has provided a temporary workaround involving the Switch.MS.Internal.TtfDelta.DisableCmapAndSbitOverflowProtection AppContext switch, but cautions that it may expose systems to vulnerabilities. This situation is reminiscent of a similar incident in February 2021, where WPF applications and Visual Studio experienced crashes after Windows 10 cumulative updates. Additionally, on the same day, Microsoft offered a workaround for another issue caused by Windows 11 updates that led to crashes in certain games.

Winsage

August 24, 2026

Microsoft shares workaround after Windows KB5120708, KB5120705, KB5120710 break printing

Microsoft released its monthly Patch Tuesday security updates, which included dynamic updates and new .NET Framework versions. Users of Windows 11, Windows 10, and Windows Server are experiencing printing issues after installing the August 2026 .NET Framework cumulative updates, particularly with Windows Presentation Foundation (WPF) applications that fail during printing tasks or when generating PDF or XPS documents. The problems are linked to specific fonts, notably Calibri, and may result in a System.IO.FileFormatException. Microsoft has provided a temporary workaround involving an AppContext switch, but enabling this switch disables certain security protections from the August 2026 update, potentially exposing applications to vulnerabilities. No permanent fix or timeline for one has been provided.

Winsage

August 21, 2026

That April Windows update you skipped? Hackers are exploiting it now

Timely updates are crucial for home users to protect personal data and device integrity. Organizations should assess systems for vulnerabilities, especially those accessible via the internet. CVE-2026-33824 is a critical vulnerability in the Internet Key Exchange (IKE) service extensions within Windows, caused by a “double-free” error, allowing code execution. It affects various versions of Windows 10, Windows 11, and Windows Server, and is included in the CISA KEV catalog. Users are urged to install the April Windows updates immediately. CVE-2026-55040 is a critical vulnerability in Microsoft SharePoint that allows unauthenticated attackers to bypass a key security feature, with a CVSS score of 9.1. It affects SharePoint Enterprise Server 2016, SharePoint Server 2019, and the Subscription Edition, with fixed builds already available.

Winsage

August 20, 2026

ShieldBreak: The Windows Defender Zero-Day With No Patch — Detect It, Mitigate It, With Qualys

ShieldBreak, identified as CVE-2026-69414, is a zero-day vulnerability in the Microsoft Malware Protection Engine that allows low-privileged local attackers to escalate privileges to SYSTEM. The public proof of concept was released on August 12, 2026, and Microsoft recognized the CVE on August 14, 2026. No patch is currently available. ShieldBreak exploits an elevation-of-privilege vulnerability by manipulating file processing during the cloud-file hydration process in Microsoft Defender, allowing attackers to control processes with elevated privileges. The exploit is functional on Windows 11 25H2 and Windows Server 2025. Qualys VMDR can detect this vulnerability using a specific query, and organizations can use Qualys TruRisk™ Eliminate for mitigation until a patch is released.

Winsage

August 19, 2026

Microsoft removes WMIC tool from Windows 11

Microsoft has removed the Windows Management Instrumentation Command-line (WMIC) tool from Windows 11 builds 24H2 and 25H2, as well as beta releases, as part of a deprecation process that began several years ago. WMIC was first deprecated in Windows Server 2012 and Windows 10 and was later made a Feature on Demand in Windows 11 22H2 before its complete removal. The tool had been exploited by malware, including ransomware, for harmful actions such as deleting Shadow Volume Copies and querying security software. Microsoft recommends IT administrators use alternatives like PowerShell, WMI's COM API, or .NET libraries for management tasks.

Winsage

August 19, 2026

Windows 11 24H2 Home and Pro reach end of support in 2 months

As of October 13, 2026, updates for Windows 11 Home and Pro editions, version 24H2, and Windows 10 Enterprise LTSB 2016 will end. The Enterprise and Education editions of Windows 11 24H2 will continue to receive support until October 2027. Customers are encouraged to upgrade to Windows 11 25H2, which became available in September 2024. Devices running Windows 11 24H2 Home and Pro editions will automatically upgrade to Windows 11 25H2, with users able to choose when to restart the update. Microsoft has stopped security updates for Windows 11 23H2 Home and Pro editions as of November 2025. The free Windows 10 Extended Security Updates program for consumers has been extended until October 2027. Windows Server 2022 will enter extended support in October 2026, continuing to receive security updates until October 14, 2031.