Security Alerts
The latest Security Alerts coverage — news, analysis, and updates from the WindowsNews.AI desk.
1998 Called: Windows Movie Maker 6.0 Installer Resurfaces on Windows 11, and It Actually Works
A preserved Windows Movie Maker 6.0 installer emerged on the Internet Archive in June 2026, proving fully functional on Windows 11. The reemergence sparked a wave of nostalgia and a fierce debate over security risks versus radical simplicity, contrasting sharply with Microsoft’s subscription-based, cloud-reliant Clipchamp. While thousands have downloaded the legacy app, experts warn of unpatched vulnerabilities lurking beneath the beloved interface.
Windows 11’s 2026 Security Overhaul: Mandatory Secure Boot Certificate Renewal and a New Consent Model
Microsoft is rolling out a mandatory Secure Boot certificate rollover for all Windows 11 devices in 2026, replacing the decade-old root certificates to close security gaps and prepare for future threats. Simultaneously, the company is introducing a user consent model for BitLocker encryption and streamlined recovery options, addressing years of user frustration with opaque security defaults. The changes will require firmware updates from OEMs and explicit user actions, marking a foundational shift in Windows security beyond simple software toggles.
BlackBerry AtHoc Cloud 7.22 Deepens Microsoft Integration with Direct Entra ID Sync and Enhanced Teams Crisis Tools
BlackBerry AtHoc Cloud 7.22, released June 30, 2026, introduces direct Microsoft Entra ID synchronization and expanded Microsoft Teams crisis collaboration tools. These enhancements streamline user provisioning and turn Teams into a real-time incident command center, making critical event management more native for Windows-centric organizations.
Microsoft Aims to Be Quantum-Safe by 2029, Azure CTO Announces
Microsoft is accelerating its Quantum Safe Program with the goal of transitioning all its products and services to post-quantum cryptography by 2029. Azure CTO Mark Russinovich revealed the deadline on June 30, 2026, underscoring the urgent need to protect against future quantum threats. The move aligns with NIST standards and positions Microsoft ahead of the curve in cryptographic resilience.
Huntress Uncovers 81M-Login Azure CLI Spray Attack: 78 Microsoft 365 Accounts Breached
A massive password-spraying campaign targeted Azure CLI sign-ins, compromising 78 Microsoft 365 accounts after 81 million login attempts. The attack exploited gaps in Conditional Access policies that often neglect non-browser authentication, highlighting the urgent need to enforce MFA across all client apps and monitor CLI activity.
Microsoft Orders Post-Quantum Crypto Transition by 2029: Here's What Windows IT Needs to Do
Microsoft has set a strict 2029 deadline for all critical products and services to transition to post-quantum cryptography, reflecting the rapid pace of quantum computing advances and new NIST standards. For Windows administrators, this means immediate action is required to inventory cryptographic assets, test post-quantum TLS and PKI, and plan a multi-year migration to quantum-resistant algorithms. The article outlines the concrete steps Windows IT teams must take now to meet the deadline and protect sensitive data from future quantum attacks.
Tata Breach Spills iPhone 18 Pro Secrets: Apple’s Takedown Storm and the New Supply-Chain Reality for Windows Makers
Apple has launched aggressive copyright takedowns after a security breach at supplier Tata Electronics leaked extensive iPhone 18 Pro details, including schematics and assembly videos. The incident exposes critical supply-chain vulnerabilities that extend to Windows PC makers sharing the same manufacturers. The breach is driving urgent industry-wide security reforms.
Spartanburg County Reconnects: Critical Services Back Online After Weeks-Long Cyber Investigation
Spartanburg County, SC, restored core network services on June 29 after a weeks‑long outage that crippled tax payments, phones, and online systems. A state cyber investigation is underway, though the cause remains undisclosed, highlighting the growing threat of cyberattacks on local governments.
Government Cloud Admins Get New Purview DLP Device Health Dashboard in July 2026
Microsoft will launch a web-based device health dashboard for Purview Endpoint DLP in July 2026, targeting GCC and DoD environments. The dashboard provides centralized visibility into DLP agent status, policy sync, and evaluation metrics, helping government administrators proactively manage data loss prevention across their device fleets.
Microsoft Edge 'Enhanced Security Mode Plus' Arrives July 2026 with Enterprise Admin Controls
Microsoft Edge is set to receive Enhanced Security Mode Plus, a new enterprise-focused security feature with advanced administrative controls, according to a Microsoft 365 Roadmap entry. Slated for worldwide release in July 2026, the feature builds on Edge's existing browser hardening by giving IT admins finer control over security mitigations. The update promises to improve protection against zero-day exploits while maintaining compatibility for business web apps.
Microsoft Edge Will Block Screenshots of Purview-Protected PDFs in OneDrive and SharePoint
Microsoft has added a roadmap entry to block screenshots of PDFs protected by Microsoft Purview Information Protection labels when they are viewed through OneDrive or SharePoint in Microsoft Edge. The feature, tracked under ID 566695, is expected to enhance data security for enterprises by preventing visual capture of sensitive documents, with a rollout planned for 2027.
Microsoft Tightens Secure Boot, Revamps Autopatch in Critical June 2026 Windows Update Push
Microsoft's June 2026 updates introduce Secure Boot certificate pre-staging, expanded hotpatching for Windows 11, and a revamped Autopatch reporting experience. IT administrators now have a six-month window to validate the new CA before enforcement, while weighing the productivity gains of reboot-free patching against its management complexity and license costs. The changes underscore an industry-wide push toward zero-trust, hardware-backed security for enterprise endpoints.
Windows 11 26H2 Hits Insider Testing as Microsoft Lays Out Kerberos RC4 Retirement Roadmap
Microsoft's June 2026 Windows recap reveals that Windows 11 version 26H2 has entered early Insider testing, Windows 365 is gaining developer and AI-agent capabilities, and IT admins must prepare for July changes that will begin deprecating Kerberos RC4 encryption. Alongside printing modernization moves, these updates signal a major shift toward heightened security and cloud integration that will require proactive planning from enterprise organizations.