windows security

Signal president Meredith Whittaker argued at SXSW 2025 in Austin that AI agents threaten privacy because useful assistants require access to browsers, calendars, payments, files and private messages, turning productivity software into a new layer of surveillance and control over personal and...

Signal President Meredith Whittaker warned in a Bloomberg interview from Davos in January 2026 that chatbots such as ChatGPT and Claude should not be treated as friends, conscious beings, or private confidants, especially as AI assistants seek wider access to users’ digital lives. Her point was...

Signal President Meredith Whittaker warned in a June 2026 Bloomberg interview that AI chatbots and autonomous agents should not be treated as friends, confidants, or sentient partners, arguing that their growing access to messages, browsers, calendars, payment tools, and devices creates a new...

Microsoft’s Security Update Guide lists CVE-2026-12466 because the vulnerable WebRTC code lives in Chromium, the open-source browser engine Microsoft Edge consumes, and Microsoft documented the entry on June 17, 2026 to tell Edge users that current Chromium-based Edge builds are no longer...

Windows users can check Secure Boot readiness by opening the Windows Security app, choosing Device security, and reading the Secure Boot status Microsoft began surfacing there in April 2026 as part of its migration from 2011 Secure Boot certificates to replacement 2023 certificates. That sounds...

Microsoft said on June 17, 2026, that its threat intelligence teams have tracked a Windows cryptocurrency clipper active since February 2026 that spreads through malicious shortcut files on USB drives, launches a bundled Tor proxy, and uses script-based components to steal wallet data. The...

More than 95 percent of average data breach losses and 90 percent of average first-party cyber losses are adequately covered by insurance, according to a Willis report released June 16, 2026, after reviewing 5,500 claims across 95 countries from January 2013 through January 2026. That is not a...

Microsoft said on June 17, 2026, that codename MDASH, its multi-model agentic vulnerability-scanning system, has moved from benchmark validation into active use across Windows, Azure, and identity engineering workflows, with newly reported discoveries spanning Hyper-V, the Windows kernel, Active...

Microsoft’s 2011 Secure Boot certificate for third-party UEFI boot components is set to expire in late June 2026, forcing Linux distributions, hardware vendors, and administrators to complete a long-planned migration to Microsoft’s newer 2023 Secure Boot certificate chain. The uncomfortable part...

On June 16 and 17, 2026, Symantec and Security Affairs reported that DragonForce ransomware operators used a custom Go backdoor, Backdoor.Turn, to hide command-and-control traffic inside legitimate Microsoft Teams relay infrastructure during an intrusion at a major U.S. services company. The...

Microsoft disclosed on March 23, 2020, that attackers were exploiting two previously unknown Windows remote-code-execution vulnerabilities in the Adobe Type Manager Library, affecting supported Windows desktop and server releases, including Windows 10, before a security update was available. The...

Microsoft’s Chromium-based Edge browser first became generally available on January 15, 2020, for Windows and macOS, replacing Microsoft’s original EdgeHTML gamble with a browser built on the same open-source engine family that powers Google Chrome. That “new Edge” is no longer new in 2026, but...

Verdict: patch Windows and endpoint tools as updates become available, enable Microsoft’s junction mitigations wherever your build and services support them, and do not treat EDR recursive scanning as a control you can safely trust by itself. GhostTree matters because it turns a familiar Windows...

Microsoft published CVE-2026-50656 on June 16, 2026, describing an Important elevation-of-privilege vulnerability in the Microsoft Malware Protection Engine used by Defender, publicly known as “RoguePlanet,” with functional exploit code assessed as available but no confirmed exploitation yet...

TechPowerUp released GPU-Z 2.70.0 on June 16, 2026, for Windows users, adding broader GPU recognition across NVIDIA, Intel, and Qualcomm hardware while urging an update because the release improves the security of the utility’s kernel-mode driver. That last clause is the story. GPU-Z is usually...

Microsoft’s June 2026 Patch Tuesday shipped on June 9 with 209 Microsoft CVEs across 24 product families, plus hundreds of related advisories, pushing the year’s Windows security workload past the 500-CVE mark for administrators already buried in update testing. The number is not merely large...

Attackers deploying DragonForce ransomware against a major U.S. services company in December 2025 hid command-and-control traffic inside Microsoft Teams relay infrastructure using a custom Go backdoor tracked by Symantec as Backdoor.Turn. The technical novelty is not that Teams was “hacked,” but...

On June 11, 2026, security researchers reported active TikTok and Instagram Reels campaigns that lure Windows users with fake free Microsoft Office, Windows activation, Spotify Premium, and Adobe tutorials, then push PowerShell commands or downloads that install the Vidar infostealer. The...

Google Chrome CVE-2026-11664 is a high-severity use-after-free flaw in Chrome’s Payments component, disclosed June 8, 2026, affecting Chrome versions before 149.0.7827.103 and potentially exploitable by a remote attacker through a crafted HTML page. The bug is not the headline-grabbing zero-day...

Google fixed CVE-2026-11645 on June 8, 2026, in Chrome 149.0.7827.102/.103 for desktop platforms after confirming active exploitation of a high-severity V8 out-of-bounds read/write flaw reachable through a crafted HTML page. The important phrase is not “high severity,” because browser teams ship...