Cve 2026 46225
The latest Cve 2026 46225 coverage — news, analysis, and updates from the WindowsNews.AI desk.
Out-of-Band Fix KB5121767 Unlocks July Patch for Affected Dell PCs Running Windows 11
Microsoft’s out-of-band cumulative update KB5121767, released July 18, 2026, resolves a compatibility issue between Windows 11 and Intel IPF drivers on specific Dell PCs. Home users should check for the update if they missed the July Patch Tuesday; IT admins need to target only affected devices. The fix lifts a hold without requiring fleet-wide deployment.
The 2026 Secure Boot Shake-Up: What Windows Users and Admins Must Do Now
Microsoft has set an October 19, 2026 deadline for the expiration of the 2011 Secure Boot Production PCA certificate. While devices will still boot, they may lose future boot-level protections. IT admins must actively verify certificate updates on their fleets, especially on devices with older firmware or BitLocker encryption, to avoid potential boot failures and recovery loops. Home users will likely receive the update automatically through Windows Update but can manually check their status.
Windows Server 2012/R2 Patching Ends October 2026: What Every IT Team Must Do Now
Microsoft's Extended Security Updates for Windows Server 2012 and 2012 R2 end on October 13, 2026, leaving un-migrated workloads permanently exposed. This article outlines a practical five-path migration strategy—retire, rehost, rebuild, upgrade, or isolate—along with inventory and dependency checks to help IT teams move before support vanishes.
Microsoft Teams Now Flags Unusual External Contacts—Here’s How to Use the Report
Microsoft has introduced an External Domain Anomalies report in the Teams admin center that flags domains with unusual spikes in first-time external contact. The report uses behavioral baselines to highlight potential security risks, but it is not a threat detector—administrators must investigate each anomaly against business context. Practical guidance is provided on interpreting the report, setting up alerts, and integrating it with existing external access policies.
Microsoft’s Emergency Windows 11 Update Fixes Dell Shutdowns, Unlocks July Security Patch
Microsoft released an out-of-band update, KB5121767, to fix a driver conflict that caused performance issues, battery drain, and shutdowns on certain Dell Windows 11 PCs. The patch also removes a block that prevented those machines from receiving the July security update, restoring the normal patching cycle.
Intune’s Scoped Permissions Are a One-Way Trip: How to Audit Before You Opt In
Microsoft Intune's Scoped permissions preview is a one-way switch that prevents silent merging of admin rights across scope tags. Organizations must run the Permissions Assessment Report to identify and reconcile access reductions before enabling the irreversible setting.
Microsoft Retires Azure NPM on Windows: AKS Users Must Rebuild Pod Security by 2026
Microsoft is retiring Azure Network Policy Manager for Windows nodes in AKS on September 30, 2026, with no direct, first-party replacement. The official Cilium migration path works only for Linux, forcing mixed-cluster operators to plan a separate Windows workstream. This article outlines a practical inventory-classify-test approach to safeguard pod-level security using Calico and NSGs before the deadline.
Windows Server 2022 Security Patches Will Remain Free Until 2031, Microsoft Confirms
Microsoft has clarified that Windows Server 2022 will continue receiving free security updates until October 2031, well past its October 2026 mainstream support end date. This gives IT administrators a long runway to plan workload upgrades, but they must be aware of limitations like paid non-security fixes and no new features during extended support.
Your Windows 11 PC might already be encrypted — here's how to avoid getting locked out
With Windows 11 24H2, Microsoft now turns on device encryption automatically during clean installs on compatible hardware. While this protects your data if the PC is lost or stolen, it also creates a single point of failure: the 48-digit recovery key. Many users don't realize they're encrypted until a firmware update or TPM glitch triggers a recovery prompt, and without that key, their files are gone forever. This guide explains how to check your encryption status, find and back up your recovery key, and test it before disaster strikes.
Microsoft’s Entra MFA Shake-Up: Your Deadline is September 2026, Not May 2027
Microsoft is deprecating the custom controls that let third-party MFA providers like Duo and Okta work with Entra ID Conditional Access. From September 30, 2026, you won't be able to add or edit those controls, and they retire completely in May 2027. Organizations must migrate to the new External MFA framework before that editing freeze, following a careful inventory, pilot, and phased rollout plan.
Key Intune Tools Land in Microsoft 365 E3/E5 on August 1, 2026 – What IT Teams Must Do Now
Microsoft will complete the rollout of Intune Suite capabilities into Microsoft 365 E3 and E5 by August 1, 2026. E3 gets Remote Help, Advanced Analytics, and Intune Plan 2; E5 adds Endpoint Privilege Management, Cloud PKI, and Enterprise Application Management. Organizations should audit current licenses, pilot new tools, and avoid canceling add-ons prematurely despite potential savings.
High-Severity 'Copy Fail' Flaw Exposes WSL2 Users to Root Attacks — Patching Steps Inside
Microsoft has disclosed a high-severity Linux kernel vulnerability, CVE-2026-31431 (Copy Fail), which allows local attackers to gain root in WSL2 environments. An exploit has already been confirmed on WSL 2.6.3, and while no official patch is available yet, users and admins must verify their WSL installations, update channels, and prepare to apply the fix as soon as it’s released.
Microsoft’s 2011 Secure Boot Certificates Are Expiring: What Windows Users and Admins Must Do Before June 2026
Microsoft's 2011 Secure Boot certificates expire in June and October 2026, requiring updates to firmware and Windows. Home users should keep Windows and firmware current; IT admins must audit devices, test updates, and plan for hardware that may need replacement. Simply enabling Secure Boot is not enough—organizations must verify new certificates are installed.