Windows Archives

Winsage

April 10, 2026

Microsoft starts removing Copilot buttons from Windows 11 apps

Microsoft is removing the Copilot buttons from its Windows 11 applications, including Notepad, Snipping Tool, Photos, and Widgets, in favor of a more streamlined interface. The Copilot button in Notepad has been replaced with a "writing tools" menu that retains AI features without the Copilot branding. The Snipping Tool also no longer features the Copilot button during area selection. This change aims to enhance functionality and simplicity in Windows 11 while keeping the underlying AI capabilities available to users. There is speculation about the potential removal of the Copilot button from laptop keyboards and further streamlining of other Windows 11 features.

Winsage

April 10, 2026

Microsoft’s Windows 11 fix list for the year: 18 changes promised

Mikael is a prominent voice in consumer technology, with experience at Macworld. He currently contributes to PC för Alla and M3, focusing on gadget releases, streaming service developments, and advancements in artificial intelligence tools.

Winsage

April 10, 2026

Microsoft adds hidden feature flags to Windows Insider builds

Microsoft has announced that Windows users will soon have "more control" over features that matter to them, although the new features are currently not enabled for testing. The latest software build indicates that these features are still in development and may change. Users are cautioned that toggling these settings could impact system performance or stability. An official announcement regarding the timeline for these updates is still awaited.

Tech Optimizer

April 10, 2026

Popular Monitor Utilities, CPU-Z And HWMonitor, Have Been Infected With Malware

Recent reports indicate that the hardware monitoring tools HWMonitor and CPU-Z have been compromised, leading to users downloading malware instead of the legitimate software. Users reported receiving suspicious executable files and antivirus alerts when attempting to download the latest versions. A specific incident involved a user who downloaded HWMonitor from the official CPUID website, only to find the file was labeled incorrectly and flagged as a virus by Windows Defender. Cybersecurity experts confirmed that this is a serious issue involving a multi-stage trojanized attack from a compromised domain. The developer of CPU-Z and HWMonitor acknowledged that a secondary feature linked to the website was compromised for about six hours, causing the main website to display incorrect files. Users are advised to refrain from downloading or updating these utilities until the issue is resolved.

AppWizard

April 10, 2026

These two huge PC performance app downloads have been infected by a virus

The download pages for CPU-Z and HWMonitor have been compromised, redirecting users to malware-infected files. Users should verify that downloaded files are named "hwmonitor1.63.exe" or "cpu-z2.19-en.exe" and be cautious of files like "HWiNFOMonitorSetup.exe." A virus scan is recommended, as Windows Defender has flagged the compromised versions. The malicious files were identified approximately nine hours ago, indicating a successful attack on the CPUID download site. The correct download links have been restored, but CPUID has not issued an official statement. The breach was reported by a Reddit user who experienced a warning from Windows Defender after downloading a suspicious file. CPUID's website and social media have not been updated since 2024, and users are advised to stay vigilant.

Winsage

April 10, 2026

Microsoft’s Shift to Native Windows Apps: A Win for Users?

Microsoft is shifting its focus towards web applications, raising concerns among users about the future of the Windows operating system. This trend has led to a homogenization of the Windows experience, making it harder for users to distinguish it from other operating systems. Historically, Microsoft has prioritized native applications, which provide unique performance and functionality. The rise of web apps has been influenced by the popularity of mobile devices and the need for cross-platform compatibility. There is uncertainty about whether Microsoft will continue down the path of web technologies or return to prioritizing native app development. Tish Haag, an author, noted that while web technologies are useful, they have contributed to the loss of Windows' unique identity. To maintain relevance, Microsoft needs to reconsider its strategy and reinvest in native app development.

Winsage

April 10, 2026

Windows 11 Taskbar Finally Movable? What You Need to Know!

Microsoft is enhancing the user experience for Windows 11 by reintroducing customizable features for the taskbar, allowing users to reposition it to the top, left, or right sides of their screens and adjust its size. This functionality was available in Windows 10 but removed in Windows 11. The company is also testing a new Command Palette Dock feature for easier access to utilities. Microsoft aims to roll out these taskbar customization features as early as summer and has indicated that 2026 will be significant for addressing user feedback and improving Windows 11.

Winsage

April 10, 2026

Microsoft begins removing Copilot from Windows 11, starting with Notepad, Snipping Tool

Microsoft has removed the Copilot branding from the Notepad app for Windows Insiders, replacing it with a "Writing tools" icon in the latest update (version 11.2512.28.0). Despite the removal of the logo, AI functionality remains intact, and users can disable the feature through the Settings menu under "Advanced Features." The Snipping Tool has also eliminated the Copilot button and currently shows no AI integration. Microsoft is scaling back unnecessary Copilot integration in various apps, including Notepad and Snipping Tool, while still maintaining underlying AI capabilities.

Winsage

April 10, 2026

Windows Zero-Day Published on Github as Microsoft Fails to Act

A security researcher named Chaotic Eclipse published a working exploit for a Windows zero-day vulnerability, called BlueHammer, on GitHub on April 2. The exploit allows attackers to gain SYSTEM-level privileges by exploiting a race condition in Windows Defender’s signature update mechanism. The exploit has gained significant attention, with over 100 forks and nearly 300 stars on GitHub. Will Dormann, a principal vulnerability analyst, confirmed that while BlueHammer is functional, it may not always operate reliably. Microsoft has not issued a patch for this vulnerability. The exploit targets the Windows Defender signature update process, allowing low-privilege attackers to manipulate a file path during operation, leading to access to the Security Account Manager (SAM) database. Currently, only 8 out of 72 cybersecurity vendors on VirusTotal flag the exploit file as malicious, which raises concerns about detection coverage. Microsoft reiterated its commitment to coordinated vulnerability disclosure but did not address the communication issues regarding the BlueHammer report.

Winsage

April 10, 2026

Microsoft Locked Out VeraCrypt, WireGuard, and Windscribe from Pushing Windows Updates

Microsoft implemented a mandatory account verification process for all partners in the Windows Hardware Program who had not completed verification since April 2024, effective October 16, 2025. This requirement necessitated that partners verify their identities using a government-issued ID matching the name of the primary contact in the Partner Center. Failure to meet this deadline or pass verification resulted in account suspension, preventing further submissions. This affected the ability of developers to sign Windows kernel drivers, leading to suspensions for notable open source projects like VeraCrypt, WireGuard, and Windscribe. Mounir Idrassi, the developer of VeraCrypt, reported his account was terminated without notice, and Jason Donenfeld of WireGuard faced similar issues. Windscribe experienced a prolonged resolution process despite having a verified account for over eight years. Following these suspensions, Scott Hanselman from Microsoft announced that the accounts would be reinstated and corrective measures were being taken.