Windows Archives

Winsage

June 8, 2026

Microsoft making much needed change to Windows 11, 10 Patch Tuesday security updates

Microsoft has rolled out new Defender patches for Windows 11 ISOs, aligning with its commitment to security updates. Updates for Microsoft Defender for Endpoint's endpoint detection and response (EDR) will no longer be included with monthly Windows security updates or Patch Tuesdays; they will now be delivered via Microsoft Update. This change aims to allow faster deployment of EDR enhancements independently of the operating system's update cycle. The rollout for Windows 10 began in late May 2026, with plans to extend support to Windows 11 and other versions by fall 2026. EDR updates will be delivered using KB5005292, contingent on prerequisite updates. Systems must run Sense version 10.8798.25857.1000 or later and have specific Windows updates installed to qualify for the new delivery method. Organizations should align their update policies with this new approach before the broader rollout. In case of significant issues, the EDR update can be reverted using a specific command. Further details are available in the Microsoft 365 Admin Center under message ID MC1381119.

Winsage

June 8, 2026

Microsoft answers what you must do as Windows 11 Secure Boot deadline hits in days

The expiration date of the original Microsoft Secure Boot KEK certificate is June 24, 2026. Microsoft held a live "Ask Microsoft Anything" session on June 4 to address concerns regarding this deadline. The expiration affects the KEK key, while the DB key remains valid until October. After June 24, Microsoft will not be able to sign new DBX payloads, which are necessary for revoking compromised bootloaders. Devices without the new KEK may miss future revocations, leading to decreased security but will not stop booting immediately. The June Patch Tuesday update is expected to classify most systems as high confidence. IT administrators are advised to use the Intune monitoring report for device status and updates. Devices in a "temporarily paused" status require OEM firmware updates. Administrators should not delay manual rollouts for devices outside the high confidence classification. Secure Boot must be enabled to update certificates, and re-enabling it later can pose risks. Older models may receive high confidence classification faster than newer ones due to statistical requirements. In PXE boot environments, caution is needed when updating bootloaders. The Secure Boot update mechanism is consistent across Windows 10 and 11, and event logs are important diagnostic tools. Key event log entries include 1801, 1802, and 1803, which indicate various device statuses and issues. Microsoft provides resources at aka.ms/GetSecureBoot for further guidance.

Winsage

June 8, 2026

Meet the hidden Windows 11 tool that reveals what Task Manager misses

Microsoft has integrated Sysmon into Windows 11 through a system update, allowing it to operate in the background and log activities in the Windows Event Log. Indicators of suspicious processes include the absence of icons or descriptions, incorrect parent processes, spelling errors in names, unsigned executable files, packed executables, suspicious DLLs or services, open TCP/IP endpoints, and unusual URLs or character strings. To install Sysmon, users must access the Control Panel, enable Sysmon, and restart their PC. Activation requires running a command in the Command Prompt. Sysmon logs can be viewed in the Event Viewer under Microsoft > Windows > Sysmon > Operational. Users can filter events using an XML configuration file. After analysis, suspicious processes should be scanned with antivirus software, and files can be uploaded to VirusTotal for further examination. Sysmon continuously logs events, while Process Monitor captures snapshots of running processes, and both tools are available for free from Microsoft.

AppWizard

June 8, 2026

Pirated PC games are delivering password-stealing malware

A surge in Windows malware campaigns has been identified, with malicious software hidden in pirated PC games and modified installers for popular franchises like Far Cry, Need for Speed, FIFA, and Assassin’s Creed. Over 400,000 devices globally have been affected, with around 30,000 cases in the United States. The malware, known as the "RenEngine loader," is disguised as a legitimate game launcher and infects systems when users download cracked games. It aims to deploy an infostealer called ARC, which can capture sensitive information such as passwords and cryptocurrency wallets, and may also install other harmful payloads like the Rhadamanthys stealer and Async Remote Access Trojan (RAT). Users often remain unaware of their infection until significant damage occurs. Recommendations for safety include avoiding unofficial downloads, using up-to-date anti-malware protection, and regularly updating software.

Winsage

June 8, 2026

Is Microsoft finally going to de-spam Windows 11 search? It looks that way — and I’m shocked that my most-wanted change could be incoming

Microsoft is reportedly exploring the option to disable web results in the Windows 11 search feature, allowing users to turn off web-based search results, including those from Bing. Currently, Microsoft has deprioritized web results in Windows search, focusing on local files and relevant settings. The anticipated update is expected to roll out to Windows 11 testers within weeks, aiming to provide a cleaner search experience by eliminating unwanted web results and Microsoft Store recommendations.

Winsage

June 8, 2026

Running Windows on your Mac? If you’re coding, you need this $33 Microsoft tool (MSRP $500)

Microsoft Visual Studio Professional 2026 is currently available for .97 (MSRP 9.99) until June 14. It supports multiple programming languages and frameworks, integrates with Azure and GitHub, and allows for building, debugging, and testing applications for Windows, Linux, and containerized environments. Apple users can access it through virtualization software or Boot Camp. Features include Intellicode for code predictions and CodeLens for insights into code changes.

Tech Optimizer

June 8, 2026

What Is OneLaunch.exe? Pros, Cons, and How to Remove It

OneLaunch is a software application that creates a personalized dock and desktop environment on Windows computers, often pre-installed or bundled with other software. It has received mixed reviews, with concerns about system slowdowns and its legitimacy. OneLaunch.exe is a background process supporting the OneLaunch application, which provides quick access to applications and updates but can consume system resources. The OneLaunch browser, installed alongside the main application, can alter browser settings and redirect searches, potentially leading to unwanted advertisements. While OneLaunch is not classified as traditional malware, it is often categorized as a Potentially Unwanted Program (PUP) due to its bundled installation and ability to modify system settings. It can monitor browsing habits and share data with third-party advertisers. Users report intrusive behavior, such as altering default browser settings, and it can negatively impact system performance. To remove OneLaunch, users should end the running process, uninstall the application, delete leftover folders, remove startup entries, and reset browser settings. OneLaunch may reappear due to accidental reinstallations, active browser extensions, lingering scheduled tasks, or hidden companion programs. Preventative measures include downloading from official sources, reading installation screens carefully, keeping systems updated, and performing regular system checks.

Winsage

June 8, 2026

Hands on with Intelligent Terminal, an AI-powered Windows Terminal

Microsoft has introduced an open-source version of Windows Terminal called Intelligent Terminal, which integrates artificial intelligence into the terminal environment. It functions as a built-in assistant, helping users with error explanations, command drafting, and troubleshooting within the terminal interface. Key features include an AI agent that assists when commands fail and retains memory of active and past sessions for context continuity. Upon first use, users can select their preferred AI agent, including options like GitHub Copilot, Claude, Codex, and Gemini. Intelligent Terminal allows customization with toggles for Automatic Error Detection and Automatic Error Suggestion. The interface includes an AI pane, session management capabilities, and the ability to resume previous sessions. Intelligent Terminal is available for download from the Microsoft Store or GitHub, and it is offered as a separate application rather than being included with standard Windows installations.

Winsage

June 7, 2026

Welcome to the 2026 Edition of the Windows 11 Field Guide!

The Windows 11 Field Guide has been rebranded as the Windows 11 Field Guide 2026 edition, covering all supported versions of Windows 11 (24H2, 25H2, and 26H1) and highlighting new and existing features. The guide will evolve throughout 2026, with updates requiring considerable effort and likely unfolding over several editions. Outdated content has been removed, including chapters on Mail, Calendar, Microsoft 365, Movies & TV, and the Microsoft Store. Chapters have been consolidated for clarity, with three upgrade chapters merged into one and four installation chapters also consolidated. New chapters have been added on Microsoft Paint, Notepad, Quick Machine Recovery, and account security basics. Existing chapters, such as those on Desktop and Passkeys, are being revised. The focus has shifted from assisting users transitioning from Windows 10 to supporting the over one billion Windows 11 users, with all "Where did it go?" sections eliminated. Visuals have been refined to optimize file sizes, and a new companion book, De-Enshittify Windows 11, has been created. Future editions will be year-based rather than version-based, with free updates for existing owners through the release of Windows 11 version 26H2 in late 2026. Thurrott Premium members will have complimentary access to the 2026 edition.

AppWizard

June 7, 2026

Halo: Campaign Evolved Launches July 28, Pre-Orders Available Now

Halo: Campaign Evolved features a new three-mission story arc titled Operation: METEORITE, which includes Master Chief and Sgt. Johnson. The narrative takes place a year before the original game and involves a covert UNSC mission aboard a Covenant research vessel. The gameplay includes battles with UNSC forces, exploration of new locations, and encounters with new enemies like the Brute Berserker. The story was developed with sci-fi author Troy Denning. Pre-orders are available for three editions: Standard Edition (.99), Premium Edition (.99), and Collector’s Edition (9.99), each offering different bonuses. The game launches on July 28, 2026, with early access for Premium and Collector's Edition owners starting July 23. It supports cross-play and cross-progression across multiple platforms and will be available on Game Pass Ultimate and PC Game Pass.