#windows-security

[ follow ]
Software development
fromZDNET
2 days ago

My new favorite Windows app made my PC safer and more reliable - and it's free

Use Microsoft Store or WinGet packages and manage them with UniGetUI to install, update, and transfer apps more safely than random EXE downloads.
Information security
fromComputerworld
3 days ago

FAQ: What you need to know about expiring Windows Secure Boot certificates

Secure Boot certificates issued in 2011 are expiring starting June, requiring Windows devices to install newer Microsoft certificates to maintain trusted boot security.
Information security
fromThe Hacker News
1 week ago

Microsoft Releases Mitigation for YellowKey BitLocker Bypass CVE-2026-45585 Exploit

Microsoft released a mitigation for the YellowKey BitLocker bypass vulnerability (CVE-2026-45585) affecting multiple Windows 11 and Windows Server 2025 versions.
#patch-tuesday
DevOps
fromComputerworld
2 weeks ago

For May, Patch Tuesday means 139 updates - but no zero-days

May Patch Tuesday released 139 updates for Windows, Office, .NET, and SQL Server, requiring accelerated deployment due to multiple RCEs and a BitLocker recovery condition.
DevOps
fromComputerworld
2 weeks ago

For May, Patch Tuesday means 139 updates - but no zero-days

May Patch Tuesday released 139 updates for Windows, Office, .NET, and SQL Server, requiring accelerated deployment due to multiple RCEs and a BitLocker recovery condition.
Information security
fromTechRepublic
2 weeks ago

Two Unpatched Windows Exploits Target BitLocker, SYSTEM Access

Two unpatched Windows vulnerabilities, YellowKey and GreenPlasma, can bypass BitLocker protections or escalate privileges after May Patch Tuesday.
Information security
fromtheregister
2 weeks ago

Mystery Microsoft bug leaker keeps the zero-days coming

YellowKey enables attackers with physical access to bypass BitLocker and gain unrestricted shell access, turning stolen laptops into potential breach events.
Information security
fromComputerworld
2 weeks ago

Microsoft's new AI system finds 16 Windows flaws, including four critical RCEs

MDASH will enter enterprise private preview in June, using AI agents to discover and help remediate Windows vulnerabilities, including critical remote code execution flaws.
#microsoft-patch-tuesday
Information security
fromComputerWeekly.com
2 weeks ago

Microsoft releases rare zero-day free Patch Tuesday update | Computer Weekly

May 2026 Patch Tuesday fixes about 140 CVEs with no zero-days, but nearly 20 critical flaws require rapid patching and Secure Boot certificate rotation by 26 June.
#kernel-drivers
Information security
fromTheregister
2 months ago

Microsoft cracks down on old Windows kernel drivers

Microsoft will stop trusting kernel drivers not through the Windows Hardware Compatibility Program by April 2026 to enhance Windows kernel security.
Information security
fromTheregister
2 months ago

Microsoft cracks down on old Windows kernel drivers

Microsoft will stop trusting kernel drivers not through the Windows Hardware Compatibility Program by April 2026 to enhance Windows kernel security.
Information security
fromTheregister
3 months ago

Microsoft's Valentine's gift to admins: 6 zero-day fixes

Six Microsoft vulnerabilities were exploited as zero-days before February Patch Tuesday, including three publicly disclosed flaws enabling remote code execution and security feature bypasses.
Information security
fromTheregister
3 months ago

Microsoft dials up the nagging in Windows, calls it security

Windows will enable default runtime integrity safeguards and introduce granular user consent prompts, restricting unsigned code while allowing overrides and developer checks.
fromThe Hacker News
3 months ago

Microsoft Begins NTLM Phase-Out With Three-Stage Plan to Move Windows to Kerberos

Microsoft has announced a three-phase approach to phase out New Technology LAN Manager (NTLM) as part of its efforts to shift Windows environments toward stronger, Kerberos-based options. The development comes more than two years after the tech giant revealed its plans to deprecate the legacy technology, citing its susceptibility to weaknesses that could facilitate relay attacks and allow bad actors to gain unauthorized access to network resources.
Software development
#windows-11
fromZDNET
4 months ago
Information security

Is turning off Windows Security a bad idea in 2026? A PC expert's bottom line

fromZDNET
5 months ago
Information security

Should you ever turn off Windows Security? It's tricky, but here's my rule of thumb

fromZDNET
4 months ago
Information security

Is turning off Windows Security a bad idea in 2026? A PC expert's bottom line

fromZDNET
5 months ago
Information security

Should you ever turn off Windows Security? It's tricky, but here's my rule of thumb

fromComputerworld
4 months ago

How to manually update Microsoft Defender

Microsoft Defender is the built-in anti-malware package that's included with modern Windows operating systems. It's alternatively known as Windows Security (it shows up under Settings > Privacy & security as Windows Security), Windows Defender, or Microsoft Defender Antivirus, as on this Microsoft Learn page. But whatever you want to call it, for many Windows users, this tool is the go-to default for handling security on their PCs.
Information security
#antivirus
fromZDNET
6 months ago
Digital life

How to find and remove PC viruses for free: 12 reliable methods that work for me

fromZDNET
6 months ago
Information security

12 ways to find viruses on your PC for free (and how to remove them)

fromZDNET
6 months ago
Digital life

How to find and remove PC viruses for free: 12 reliable methods that work for me

fromZDNET
6 months ago
Information security

12 ways to find viruses on your PC for free (and how to remove them)

Apple
fromThe Verge
7 months ago

Apple turned the CrowdStrike BSOD issue into an anti-PC ad

Apple released an ad mocking Windows' kernel-level BSOD caused by a faulty security update and promoted switching to Mac.
European startups
fromZDNET
11 months ago

Microsoft rolls out Windows security changes to prevent another CrowdStrike meltdown

Microsoft is implementing significant changes to Windows endpoint security to prevent disasters like the CrowdStrike meltdown.
New Windows capabilities allow security solutions to run outside the Windows kernel for improved reliability.
[ Load more ]