Windows Archives

Winsage

May 13, 2026

Disgruntled researcher releases two more Microsoft zero-days

An anonymous researcher known as Nightmare-Eclipse has revealed two new vulnerabilities affecting Windows systems, named YellowKey and GreenPlasma, shortly after Microsoft's latest Patch Tuesday update. YellowKey is a "BitLocker bypass" that allows attackers with physical access to gain unrestricted shell access to protected machines. Experts have expressed concerns about YellowKey's potential to transform laptop theft into a serious breach notification scenario, and suggested mitigations such as implementing a BitLocker PIN and a BIOS password lock. Nightmare-Eclipse has also hinted that YellowKey could function as a backdoor allegedly introduced by Microsoft, although this claim remains unsubstantiated. GreenPlasma is a privilege escalation flaw for which partial exploit code has been released, but it currently triggers a User Account Control (UAC) consent prompt, requiring attackers to invest time in weaponizing it. There is no known mitigation for GreenPlasma, making it crucial for organizations to patch their systems promptly once Microsoft addresses the issue. Nightmare-Eclipse has previously disclosed five zero-day vulnerabilities this year, including BlueHammer, and has characterized their actions as a response to a perceived violation of trust. The researcher has indicated the existence of a "dead man's switch," suggesting that more disclosures could follow if their demands are not met.

Winsage

May 13, 2026

Windows Update is getting better at saving your PC from buggy drivers

Microsoft has introduced Cloud-Initiated Driver Recovery, a feature that allows the company to replace problematic drivers on affected devices directly from the cloud, without requiring manual intervention from users or hardware partners. This aims to enhance system reliability and performance while reducing user burden in managing driver issues.

Winsage

May 13, 2026

Former Windows boss reveals why modern Windows 11 apps feel slower, says Microsoft once gave every engineer a stopwatch

Steven Sinofsky, former head of the Windows Division at Microsoft, discussed the company's engineering culture and its focus on resource management from 1980 to 2000, where every engineer was given a physical stopwatch to measure various performance metrics. This practice emphasized optimizing software for speed and efficiency, a stark contrast to modern applications that consume significant RAM due to shifts in market dynamics and hardware advancements. The current trend prioritizes rapid feature deployment over optimization, leading to performance issues in applications. Microsoft is responding to criticism by enhancing the performance of Windows 11, focusing on native desktop applications and optimizing core components, including the Start menu and File Explorer. They are also testing new CPU scheduling profiles to reduce micro-lags during user interactions.

Winsage

May 13, 2026

Windows Update Gets Cloud‑Based Driver Recovery to Fix Faulty Updates

Microsoft has introduced a cloud-based solution called Cloud-Initiated Driver Recovery to address driver update issues for Windows users. This feature automatically detects and fixes driver-related problems by rolling back faulty drivers without user intervention. It operates within Windows Update, replacing problematic drivers with stable versions or approved alternatives. The recovery process will only activate if a validated driver version is available, and Microsoft will manage it independently of hardware partners. Manual validation and testing will occur from May to August 2026, with full deployment expected by September 2026.

Winsage

May 13, 2026

Windows BitLocker zero-day gives access to protected drives, PoC released

A cybersecurity researcher known as Chaotic Eclipse has released proof-of-concept exploits for two unpatched vulnerabilities in Microsoft Windows: YellowKey, a BitLocker bypass, and GreenPlasma, a privilege-escalation flaw. The YellowKey vulnerability affects Windows 11 and Windows Server 2022/2025, allowing unauthorized access to BitLocker-protected volumes by exploiting the Windows Recovery Environment. The exploit can be executed using specially crafted 'FsTx' files on a USB drive or directly on the EFI partition. Independent researcher Kevin Beaumont has validated the exploit, which can bypass BitLocker protections even in a Trusted Platform Module (TPM) environment. The GreenPlasma vulnerability allows unprivileged users to create arbitrary memory-section objects, potentially leading to privilege escalation. Chaotic Eclipse has expressed dissatisfaction with Microsoft's handling of bug reports, prompting the public disclosure of these vulnerabilities. Microsoft has stated its commitment to investigating security issues and updating affected devices.

Winsage

May 13, 2026

Microsoft’s MDASH AI System Finds 16 Windows Flaws Fixed in Patch Tuesday

Microsoft has introduced a multi-model AI system called MDASH, designed to enhance vulnerability discovery and remediation processes. Currently in limited private preview testing with select customers, MDASH employs over 100 specialized AI agents for various classes of vulnerabilities, enabling autonomous discovery, validation, and demonstration of exploitable defects in complex codebases. The system operates through a structured pipeline that analyzes source code, constructs threat models, and validates findings using auditor and debater agents. MDASH has successfully identified 16 vulnerabilities in its initial tests, including two critical flaws affecting Windows networking and authentication: 1. CVE-2026-33824 (CVSS score: 9.8) - A double-free vulnerability in "ikeext.dll" allowing remote code execution via specially crafted packets. 2. CVE-2026-33827 (CVSS score: 8.1) - A race condition vulnerability in Windows TCP/IP ("tcpip.sys") enabling remote code execution through specially crafted IPv6 packets.

Winsage

May 13, 2026

Microsoft aims to speed Windows with ‘leap forward’ in WinUI 3 perf

Microsoft has announced a 25 percent improvement in the performance of WinUI 3, specifically in File Explorer components. There has been a 41 percent reduction in memory allocations and a 45 percent decrease in function calls. Some optimizations may involve breaking changes, which will initially be optional for developers. The enhancements are intended to become the default in future iterations of WinUI and the Windows App SDK. Despite these improvements, developers have expressed concerns about WinUI 3's performance, noting it is slower than WPF and UWP. The reliance on WinRT interop for component actions is seen as a significant factor hindering speed. Additionally, there are historical tensions regarding the adoption of Microsoft's frameworks within the Windows and Office teams, leading to skepticism about their reliability.

BetaBeacon

May 13, 2026

Steam Deck becoming obsolete? Android gaming tablet runs PC games thanks to emulator

The Lenovo Legion Tab 5 was tested with GameHub, allowing for the playing of demanding PC games on an Android tablet through an emulator. Performance was decent, with some issues such as long loading times, inconsistent game downloads, occasional crashes, and difficulty syncing cloud saves. Despite these drawbacks, the emulator provides a way to play simpler titles from the Steam library on the go for those who already own a powerful Android tablet.

Winsage

May 13, 2026

Your laptop has a hidden control panel Windows won’t show you

Your laptop's utility application provides various features that enhance productivity, often overlooked during setup. It typically appears on the desktop or taskbar and offers functionalities that extend beyond basic Windows Settings. Key features include: - A dashboard summarizing essential PC attributes such as battery status, memory availability, CPU performance, serial number, and warranty information. - Diagnostic tools for troubleshooting and a method to check for updates, including Windows Update, Microsoft Store, and the utility application itself. - Performance settings for adjusting fan speed, allowing for higher performance or quieter operation. - Options to adjust the color gamut for professionals in photography or design, with different color profiles available. - Charging mode adjustments to extend battery lifespan by limiting charging to around 80% during regular use. - Sound presets to enhance audio quality for music, movies, or gaming. - OLED management features to mitigate burn-in issues on OLED displays. - Presence detection technology that locks the device when the user is away and can utilize facial recognition or smartphone proximity for unlocking.

Winsage

May 13, 2026

Linux gains more critical Windows apps … 3D Movie Maker and Space Cadet Pinball

Several notable Windows applications, including Space Cadet Pinball and Microsoft 3D Movie Maker, have been successfully ported to Linux. Space Cadet Pinball, originally part of the Microsoft Plus Pack for Windows 95, has been decompiled and rebuilt, now available across 14 platforms, including Linux, thanks to Muzychenko Andrey. The source code for Microsoft 3D Movie Maker was released by Microsoft, and a new fork has been developed by Mark Cave-Ayland and Ben Stone, enabling it to run on Linux. Their project also includes bug fixes, 64-bit compatibility, and builds for ARM64 Windows, with plans for a Raspberry Pi version.