workaround Archives

Winsage

July 27, 2026

New Certighost PoC exploit lets attackers hijack Windows domains

A proof-of-concept exploit for the "Certighost" vulnerability (CVE-2026-54121) has been released, affecting Windows Active Directory Certificate Services. This vulnerability allows authenticated attackers to compromise a Windows domain by manipulating machine account attributes to obtain certificates from AD CS, enabling them to authenticate as that machine or even as a domain controller. The flaw was reported to Microsoft on May 14, 2026, and addressed in the July 2026 Patch Tuesday updates. The vulnerability exploits a fallback mechanism in AD CS during certificate enrollment requests, allowing attackers to direct the Certification Authority to their controlled systems. The researchers demonstrated that a low-privileged user could create a machine account and use it to impersonate a domain controller, leading to potential domain compromise. Microsoft has added validation to the chase process in the July updates to prevent this exploitation. For those unable to install the updates, a temporary workaround involves disabling the chase fallback, though this has not been extensively tested.

AppWizard

July 27, 2026

I couldn’t sign into the PlayStation App on Android, but I found an easy way to get around Sony’s finicky 2FA

Sony has faced criticism for discontinuing physical game discs and issues with the PlayStation app, particularly regarding two-factor authentication (2FA). Many users have reported difficulties logging into their accounts when they do not receive verification text messages. This problem has affected access to PS4s and PS5s. Users can recover their accounts by following these steps: open the PlayStation app, sign in with their email, select "Trouble Signing In?", choose "Recover Your Account", and reset their password. They can then set up a passkey, which disables 2FA, allowing them to log in without needing the verification code. Previously, users could use 2FA on consoles if they did not receive an SMS code, but this option is no longer available, making backup codes essential.

Winsage

July 26, 2026

Microsoft is using TPM chips to crack down on pirated Windows activations

Microsoft has mandated the inclusion of the Trusted Platform Module (TPM) as a standard feature in all new motherboards and CPUs to enhance the Windows activation process. The company has introduced an enhancement to its Key Management Service (KMS) that leverages TPM's security capabilities to authenticate the legitimacy of KMS servers. This new "TPM-based attestation" aims to mitigate exploitation risks associated with KMS by validating the cryptographic integrity of KMS servers. Starting in August 2026, TPM-based attestation will be required for KMS activation with the next release of Windows Server. Microsoft has also closed off the "KMS38" activation method in 2025, while traditional KMS activation remains functional. The Massgrave collective has developed an Online KMS method that may be impacted by the new TPM-based attestation.

AppWizard

July 24, 2026

Halo: Campaign Evolved early adopters were unable to play the game on Steam as it kept forcing them to look at the art book instead

On the early access launch of Halo: Campaign Evolved on Steam, players faced an issue where they were repeatedly opening the art book instead of accessing the game. A member of the Halo team addressed the problem on Discord within forty minutes, stating that a Steam Client restart would resolve the issue. A workaround suggested on Reddit involved uninstalling the art book through Steam properties. The art book is a standalone application featuring artwork, a game manual, a short story, and a musical score, but it overshadowed the game at launch. Additionally, players needed to link their Microsoft accounts to access the game, which was complicated by server issues on launch day. Performance tips include avoiding Ultra graphical settings for better performance and disabling motion blur for improved clarity.

Winsage

July 23, 2026

LG monitors are reportedly automatically installing bloatware on Windows 11 PCs, but there’s an apparent fix

LG monitors are automatically installing McAfee bloatware on Windows 11 PCs without user consent, as indicated in the changelog of the LG Monitor App Installer on the Microsoft Store. This installation occurs when an LG monitor is connected, leading to a McAfee pop-up due to automatic installation triggered by Windows Update, which is logged by the Windows Reliability Monitor. Users can prevent this by enabling a setting in the Group Policy Editor to stop automatic downloads of applications linked to device metadata. It is recommended that users who have manually installed the LG monitor app remove it, as McAfee is a core component of the application. Microsoft has not commented on this issue.

Winsage

July 22, 2026

You can stop LG monitors that are reportedly installing bloatware on your Windows 11 PC, but the fix shouldn’t require this much effort

LG monitors are reportedly installing unwanted software, specifically McAfee bloatware, on Windows 11 systems without user consent when connected. This issue has been highlighted by Windows Latest, and the changelog of LG's monitor app on the Microsoft Store confirms the installation. A complex workaround exists for users to remove the software.

Winsage

July 20, 2026

Windows Server Update Services buckle under Microsoft’s metadata mountain

Microsoft's Windows Server Update Services (WSUS) is facing significant challenges, particularly with existing deployments experiencing synchronization issues described as "sync purgatory." The problems stem from "severe degradation" due to a "buildup of publishing metadata," leading to slow synchronization processes and timeouts. This issue is not related to the recent Patch Tuesday update but has seen a "heightened impact" since July 13, 2026. Although WSUS is a critical tool for managing updates in enterprise environments and remains supported, Microsoft has recommended transitioning to alternative solutions, especially cloud-based options, since October 2024. Many administrators continue to rely on WSUS, which poses risks of failed synchronization and potential vulnerabilities. As of now, Microsoft has not provided a workaround for affected servers but has implemented a mitigation for new installations as of July 18. Existing servers are still experiencing difficulties, and Microsoft is working on solutions to help remove problematic metadata. The issue affects nearly all desktop and server operating systems supported by WSUS, including Windows 11 26H1 and older versions like Windows 10 1607 and Windows Server 2012. Administrators currently have limited options and must monitor the situation as it develops.

Winsage

July 11, 2026

This Windows feature has been eating users’ RAM for years, Microsoft still hasn’t fixed it

Memory leaks have been reported with the Phone Link feature in Windows 11, specifically the Cross Device Service, which is consuming excessive amounts of RAM. Users have noted that this service can use between 15 to 30GB of RAM, leading to significant system slowdowns and reduced internet speeds. Complaints about this issue have been ongoing since early 2023, with users often needing to manually intervene via Task Manager to restore system performance. The Cross Device Service is intended to facilitate features like clipboard sharing and notification syncing but appears to malfunction and enter a loop that increases memory usage. Microsoft has not officially acknowledged the problem, and while generic troubleshooting steps have been suggested, they may not resolve the issue for all users. Disabling the Phone Link feature has been proposed as a potential solution to mitigate memory consumption.

Winsage

July 6, 2026

Microsoft just broke custom folder icons in Windows, and the reason is a bug from 2003

Microsoft has updated Windows to stop trusting untrusted desktop.ini files, a change aimed at addressing a long-standing security vulnerability that has existed since 2003. This decision affects the display of custom folder icons, as Windows will now ignore customization metadata from potentially unsafe sources. Users can still use custom folder icons if the desktop.ini file and icon resources come from trusted locations. A workaround allows users to manually create a desktop.ini file with the desired icon while following new security protocols.

Winsage

July 6, 2026

Microsoft finally fixes bug that broke all major Windows 11 core UI components on some PCs

Microsoft introduced an update to the out-of-box experience (OOBE) for Windows 11, identified as KB5095189, targeting versions 25H2 and 24H2. This update includes enhancements and fixes, coinciding with additional updates KB5102558 and KB5095615 from the June C-release preview update (KB5095093). A major fix addresses a storage issue caused by the Capability Access Manager process, which was consuming significant disk space. Another fix resolves a malfunction affecting Shell components, impacting the Start menu, Search bar, Settings, Taskbar, and File Explorer, primarily on provisioned PCs due to compatibility issues with XAML. This bug had been present since July 2025 and is being resolved with updates released starting June 23, 2026 (KB5095093), with full deployment expected in the following month. Users are advised to use previous workarounds until the fix is fully available. Further details can be found in support article KB5072911 on Microsoft's website.