#windows
-
Black on black: how a goth fan "broke" Windows 3.1
Microsoft's Raymond Chen explains how Windows handles black-screen complaints today. He also recalls an old support call where the culprit turned out to be not a driver but a user's flawlessly consistent taste.
-
Microsoft ships out-of-band Windows updates to distrust eMudhra certificates
The KB5134133 and KB5134125 out-of-band updates remove seven certificates tied to eMudhra's compromised certificate authority keys from the Windows trust list. They target systems that don't receive automatic trust list updates.
-
Microsoft Offers Buyouts to 60,000 Employees
The company is rolling out a "voluntary exit" program for tens of thousands of workers in the US, UK, Canada, and India, aiming to shrink headcount without another round of layoffs.
-
BlackX: China-Linked Bootkit Slips Past Secure Boot on "Patched" Windows
Kaspersky has detailed BlackX, a new UEFI bootkit that hit diplomatic bodies across Central Asia. Researchers attribute the campaign to the China-linked group APT41.
-
Malicious npm Package imgdecode Hides a Shellcode Loader in a Windows Native Addon
SafeDep researchers flagged imgdecode, an npm package that is part of the long-running MALFEX campaign aimed at compromising Windows systems. Despite public exposure, it remains available and has already been downloaded 979 times.
-
AOMEI Backupper Update Servers Tampered With in 5–10 Minute Windows to Push a Backdoor
Between May and July 2026 attackers repeatedly swapped the update files served from AOMEI's own servers, so the Windows backup program only downloaded a backdoor during those brief intervals.
-
Researchers Run Their Own Code Inside a Windows SmartScreen Enclave
In a lab, Doyensec broke the isolation of a VBS enclave that stores the password hash for a Windows anti-phishing feature. Microsoft had already patched the flaw in its September update.
-
Microsoft Patches a Record 1,400-Plus Flaws in a Single Month
Microsoft's October update batch eclipses even September's record of nearly a thousand fixes. The company credits large language models for the flood of discoveries.
-
Microsoft: Outdated Windows Devices Will Stop Getting Security Updates
The company warns that devices running unsupported versions of Windows will stop receiving security updates after next year's planned rotation of Windows Update certificates.
-
Microsoft Unveils New AI-Friendly Hardware and Windows Changes
At its event, Microsoft announced AI-oriented devices and Windows updates — the company promises even more AI, both inside the OS and on the desktop.
-
CERT-UA: 100+ Hacked Sites Push LunexStealer via Fake Cloudflare Check
Ukraine's CERT-UA has found over a hundred compromised websites that, under the guise of a "prove you're human" check, coax visitors into running a malicious command themselves.
-
WSL gains support for Linux containers
Microsoft has made WSL Containers generally available: the Windows Subsystem for Linux can now build and run Linux containers directly, without a separate stack.
-
Windows 11 26H2 is here: a big update you'll barely notice
Microsoft has begun rolling out the annual Windows 11 26H2 update, but users are unlikely to spot much new: the OS has long lived on a shared servicing branch.
-
Lunex Stealer Turns an AMD Driver Against the Very Tools Meant to Stop It
Ontinue has detailed the Lunex malware-as-a-service platform, whose Psychedelic stealer abuses a vulnerable AMD Radeon driver to blind security monitoring and harvest browser passwords.
-
Microsoft is quietly retiring the ‘Copilot Plus PC’ brand
Two and a half years after its splashy debut, Microsoft and Qualcomm are all but admitting that the ‘Copilot Plus PC’ label is dead.
-
File Notification Attacks: Side-Channel Leaks on Linux, Android, Windows, and macOS
Researchers in Graz show that subscribing to filesystem change events lets an attacker without read access reconstruct user behavior — from keystroke timing to the list of websites someone visits.
-
A documentation placeholder domain now serves ClickFix attacks
The third-party.com domain, used for years as a generic placeholder in developer docs and code samples, now shows a fake Cloudflare check that nudges Windows users into running malicious PowerShell.
-
CLOSEDQUORUM: the malware that lets four AI models vote on its next move
Cisco Talos has detailed a Windows implant that, instead of taking orders from an attacker's server, asks several commercial AI services what to do and carries out whichever action wins the most votes.
-
September Windows updates break Always On VPN connections
Microsoft has warned that installing the September 2026 Windows 11 security updates may disrupt the enterprise Always On VPN remote access solution.
-
China's UTA0565 Chains Chrome and Windows Zero-Days to Drop CLEANGULP
The group leaned on a three-flaw exploit chain and fake media and NGO websites to escape the browser sandbox and infect victims with a new backdoor.
- More