Windows Archives

Winsage

September 4, 2026

Microsoft says KB5120998 Windows update resets desktop settings

Microsoft has acknowledged an issue affecting some Windows devices after the installation of the KB5120998 preview update released on August 27, 2026. This issue primarily impacts Windows 11 versions 24H2 and 25H2, causing desktop settings, including wallpaper and themes, to reset or be lost, often resulting in a solid black background. Users are unable to manually restore their customized settings due to the issue preventing the correct loading of settings. The KB5120998 update was intended to enhance the Start menu, taskbar, and Windows search but inadvertently introduced complications, including changes to mouse settings that cannot be restored. The update is optional but installs automatically for users with the "Get the latest updates as soon as they're available" feature enabled. A similar bug occurred in February 2020 with the KB4539602 update, which disrupted desktop wallpaper functionality.

Winsage

September 4, 2026

Microsoft warns fake CAPTCHA is tricking Windows users into running malware

Microsoft has identified a new malware campaign called TerminalFix that uses fake CAPTCHA prompts to trick Windows users into executing malicious commands. This campaign is a variation of ClickFix attacks and employs deceptive pages that impersonate reputable services like Cloudflare. Instead of traditional CAPTCHA challenges, users are instructed to open PowerShell or Command Prompt and paste in commands, allowing attackers to execute complex scripts more easily. TerminalFix initiates a multi-stage intrusion, granting attackers persistent proxy access to the infected machine, which can lead to further exploitation of the company's network. The campaign relies on social engineering tactics, requiring user compliance with counterfeit verification instructions. Microsoft has released mitigation guidance, recommending restrictions on PowerShell access, monitoring for DLL sideloading, blocking outdated Flash plugins, and enabling cloud-delivered protection in Microsoft Defender Antivirus. The campaign poses significant risks to enterprise networks, but individual users should also be cautious about executing commands requested by websites.

Winsage

September 4, 2026

Windows 11 will start telling apps your age, but Microsoft says it won’t share your birthday

Microsoft is integrating age verification directly into Windows 11, allowing applications to access users' age ranges (e.g., 13-15 or 18+) without disclosing their actual birthdays. This is facilitated through new system-level APIs, specifically the GetUserAgeRangeAsync function, which returns one of five defined age ranges: Under 10 (0-9), 10-12 (10-12), 13-15 (13-15), 16-17 (16-17), and 18+ (18 and above). Another API, GetAgeVerificationStatusAsync, indicates whether the age was independently verified with statuses like Verified, Unverified, OptedOut, TemporarilyUnavailable, or NotApplicable. Microsoft validates the identity of the calling app to ensure security, limiting access to these age signals. This initiative aligns with regulatory demands for enhanced child safety measures in regions like the UK, EU, and U.S., where states are moving toward operating-system-level mandates for age verification.

Tech Optimizer

September 3, 2026

Bitdefender vs Norton 2026: Which Antivirus Wins?

Norton and Bitdefender both have a malware detection rate of 99.8%. Norton excels in phishing protection, blocking 95% of phishing attempts compared to Bitdefender's 89%. In terms of system impact, Bitdefender uses 11% CPU and 183 MB RAM during scans, while Norton uses 23% CPU and 384 MB RAM. Norton offers features such as cloud backup, parental controls, and unlimited VPN, whereas Bitdefender lacks cloud backup and has a limited VPN. Pricing for both is competitive, but Bitdefender generally has cheaper renewal costs. Norton provides faster customer support response times. In a comparison of nine categories, Norton won five and Bitdefender won three. For users needing backup and parental controls, Norton is preferred; for those with older laptops, Bitdefender is recommended.

Tech Optimizer

September 3, 2026

Avast Antivirus Zero-Day PoC Lets Attackers Dump SAM Database and Gain SYSTEM Shell

A public proof-of-concept (PoC) repository has revealed a local privilege escalation zero-day vulnerability in GenDigital's Avast Antivirus, allowing attackers with local execution access to extract the Windows Security Account Manager (SAM) database and execute a shell with NT AUTHORITYSYSTEM privileges. The flaw is located in the Avast Sandbox component and could enable a complete local takeover of the system. The PoC is compatible with any version of Avast Antivirus and has been tested on fully patched versions of Avast and Windows 11 25H2. The repository does not provide a formal release, CVE identifier, or patch details. The vulnerability may also affect other GenDigital products like AVG and Norton. Security teams are advised to monitor for suspicious activities related to Avast services and restrict local administrator access. Organizations should inventory their deployed versions and apply vendor-provided updates as they become available.

Winsage

September 3, 2026

Microsoft OneDrive wants to back up everything. You don’t have to let it

OneDrive offers a minimum of one terabyte of online storage for Microsoft 365 subscribers and provides seamless backup of files and settings, particularly useful when transitioning to a new PC. However, its automatic backups can lead to excessive internet bandwidth usage and clutter with unnecessary files. Recent updates allow users to opt out of OneDrive backup entirely, although the specifics of this feature are unclear. Users can also manage their experience by selectively backing up folders and regularly reviewing stored files.

Tech Optimizer

September 3, 2026

Prolific Microsoft 0-day hunter drops CrowdStrike Falcon exploit PoC

Nightmare Eclipse, a security researcher known for identifying vulnerabilities in Microsoft products, has shifted focus to other vendors, revealing a zero-day vulnerability called FalconFlank that targets CrowdStrike’s Falcon endpoint security platform. FalconFlank is a privilege escalation vulnerability that exploits the Microsoft Office malicious macros remediation feature within CrowdStrike Falcon. CrowdStrike is investigating the claims and advises customers to disable the Microsoft Office File Suspicious Macro Removal Windows policy setting while assuring them of continued protection through Cloud Anti-malware settings. The exploit works on fully updated Windows 11 25H2 and Windows Server 2025 systems running CrowdStrike Falcon with Optimal Protection enabled. Nightmare Eclipse has also discovered other vulnerabilities, including HardBreacher affecting Kaspersky’s endpoint antivirus and PrettyPrague in Gen Digital’s Avast antivirus, which allows attackers to dump the SAM database. Gen Digital is developing a patch for the Avast vulnerability, while Kaspersky has not commented. Additionally, Nightmare disclosed a memory corruption zero-day vulnerability in Nvidia, named GreenSection, which causes system crashes.

Winsage

September 3, 2026

17 Useful WinGet Commands Every Windows 11 User Should Know

WinGet is a package manager included with Windows 11, accessible via a command line interface. It provides a more efficient method for installing applications compared to traditional download methods. Users can verify WinGet installation by running the command winget --version. Key commands include: 1. winget search : Finds packages by name, publisher, or moniker. 2. winget show --id : Displays detailed information about a specific package. 3. winget install -e --id : Installs a package using its exact ID. 4. winget install -e --id --version : Installs a specific version of a package. 5. winget install -e --id --silent --accept-package-agreements --accept-source-agreements: Installs a package silently without user prompts. 6. winget list: Lists all installed applications. 7. winget upgrade: Lists installed packages with available updates. 8. winget upgrade --all --include-unknown --silent --accept-package-agreements --accept-source-agreements: Updates all packages without user input. 9. winget uninstall : Removes a specified package. 10. winget export: Generates a JSON file of installed packages. 11. winget import: Reinstalls applications from an exported file. 12. winget pin : Prevents a package from being updated. 13. winget download : Retrieves an installer without executing it. 14. winget repair : Initiates a repair routine for an application. 15. winget source: Manages package sources. 16. winget settings: Opens the WinGet settings file for customization. 17. winget configure: Applies a configuration file for installations. Three commands are primarily for package publishers and can be ignored by most users: PLACEHOLDER3dfbcb91baab02cd, PLACEHOLDER5b3baaac6e2d9202, and winget dscv3. If WinGet is not recognized, it may be due to a missing App Installer package, a missing PATH entry, or running in an unsupported context. WinGet is safe to use, compatible with Windows 10 version 1809 and later, and does not require administrator rights for all commands.

Winsage

September 3, 2026

Microsoft Teams, Outlook fail to launch on ARM-based Windows PCs

Microsoft is addressing an issue affecting users of Microsoft Teams and the new Outlook on ARM-based Windows devices, specifically the Surface Laptop 7 and Surface Pro 11, following updates released since the August 2026 Patch Tuesday. Users may experience crashes and launch failures after installing security updates from August 11, 2026, particularly update KB5121003. This issue primarily affects newly set up or freshly imaged PCs that lack the latest Microsoft Store updates, while classic Outlook, Word, Excel, and other applications remain unaffected. Microsoft recommends updating the Auto Super Resolution Package as a temporary workaround. A permanent fix is being developed and will be included in a future Windows update. Additionally, Microsoft has acknowledged other issues stemming from the August updates, including problems with printing and PDF exports in certain applications, and has been rolling out fixes for system crashes and gaming problems linked to peripherals with built-in RGB lighting. Customers are also advised to disregard alerts about Microsoft Defender Antivirus being disabled after the latest updates.

Winsage

September 3, 2026

Windows 11 update sends some desktops into an unwanted goth phase

Microsoft's latest update for Windows 11 has caused some users to experience a default black background due to issues with personalization settings in the August update preview for versions 24H2 and 25H2. Users are unable to restore their preferred desktop backgrounds, and the update may also affect other desktop settings like slideshow configurations and contrast themes. Microsoft has acknowledged the problem and is working on a fix for a future update.