Security Alerts
The latest Security Alerts coverage — news, analysis, and updates from the WindowsNews.AI desk.
Microsoft Office 2026 Macro Alert Overhaul: Yellow Allows, Red Blocks – Here’s How It Works
Microsoft plans a 2026 overhaul of Office macro alerts, introducing yellow "Enable Content" bars for unblocked internet files and red bars for high-risk macros. The update also includes streamlined Mark of the Web removal tools, reducing clicks for trusted documents while maintaining strong malware defenses.
Go SSH Library Vulnerability CVE-2026-39827 Allows Attackers to Crash Windows Servers with Simple Memory Leak
Microsoft has disclosed CVE-2026-39827, a denial-of-service flaw in the Go SSH library that allows an authenticated attacker to crash Windows-based services via a memory leak. While the built-in Windows OpenSSH server is unaffected, many Go-powered tools that embed the library are vulnerable, requiring immediate vendor updates and proactive network hardening.
A Humanoid Robot Threw Kung Fu Kicks at Workers—Now IT Must Rethink Safety
A viral video from July 6, 2026 shows a humanoid robot performing kung fu kicks at workers, prompting an emergency stop. The incident exposes critical gaps in software, networking, and safety governance for IT teams managing robotics. This analysis offers concrete steps to prevent similar malfunctions.
User-Reported Scams Land Directly in Teams Admin Center’s Protection Reports
Microsoft has added user-reported security signals to Teams admin center’s Protection reports under Roadmap 536571. The feature allows IT teams to see when employees flag suspicious Teams messages as phishing or spam, enabling faster threat hunting and incident response. It requires Defender for Office 365 Plan 2 or equivalent licensing and is now generally available for commercial tenants.
Microsoft Ships Long-Awaited S/MIME Certificate Storage in New Outlook for Windows Contacts
Microsoft launched S/MIME certificate storage in the new Outlook for Windows contacts on July 6, 2026, closing a major feature gap for government and enterprise users. The update lets desktop users associate encryption certificates directly with contacts, enabling seamless encrypted email without workarounds. IT admins can now deploy the new Outlook with full S/MIME compliance in regulated environments.
Microsoft Targets May 2026 for LDAP-Based S/MIME Certificate Lookup in New Outlook for Windows
Microsoft has scheduled the long-awaited LDAP-based S/MIME certificate lookup feature for the new Outlook for Windows to reach general availability in May 2026. The update will allow corporate users to automatically retrieve encryption certificates from on-premises directory servers, closing a critical feature gap that has kept many enterprises on the classic Outlook client. IT admins should plan their migration strategies around this timeline, ensuring that S/MIME-dependent employees remain on classic Outlook until the feature is fully rolled out and tested.
Microsoft Teams Flooded with Fake IT Calls Spreading EtherRAT — Here’s What Admins Must Do Now
A wave of social engineering attacks on Microsoft Teams sees threat actors impersonating IT support to trick users into installing the EtherRAT remote access trojan. Security experts recommend administrators restrict high‑risk external chat and calling rather than cutting off all external communication, while training users to verify any unsolicited support requests through separate channels.
Your Windows 11 C Drive May Be Full Because of This One Log File—Here’s the Fix
Microsoft's optional June 2026 update (KB5095093) addresses a Windows 11 storage issue where the CapabilityAccessManager.db-wal log file grows excessively, consuming gigabytes of space. Users can recover lost space by installing the preview update or manually deleting the file. The fix will be included in July's Patch Tuesday.
Microsoft 365 Family Now $99.99/Year: 1TB OneDrive, Office, and Defender for Up to 6 People
Microsoft 365 Family continues to offer a comprehensive cloud and security bundle for up to six users at $99.99 per year as of July 2026. This guide details everything included, from OneDrive storage and Office apps to Microsoft Defender and Family Safety, along with practical steps to maximize value.
Advania’s 50% Take-Back Target: What the UK Refurb Hub Means for Your Next Windows Fleet
Scandinavian IT services giant Advania has pledged to take back half of all devices it sells and return them to the market as refurbished units by 2030, anchored by a new UK refurbishment centre. The move signals a strategic embrace of circular IT that could reshape enterprise hardware procurement and disposal, offering cost and sustainability benefits while raising fresh questions about data security and device readiness for businesses.
CVE-2026-8711: Which Windows NGINX Deployments Actually Need Urgent njs Patching
A newly disclosed vulnerability in the NGINX JavaScript module (njs) affects versions 0.9.4 through 0.9.8 on all platforms, including Windows. Only administrators actively using njs need to apply the immediate fix; others can update on their regular schedule. The flaw highlights the importance of understanding your server's attack surface and maintaining software inventories.
Your Windows Server 2016 Deadline Isn’t July 2026 — It’s January 2027, and That Changes Everything
Microsoft's end-of-support calendar splits the 2016 stack: SQL Server 2016 transitions from extended support on July 14, 2026, while Windows Server 2016 continues receiving free updates until January 12, 2027. The six-month gap upends migration plans for organizations running both products together, forcing DBAs to act sooner than server admins. This analysis covers why the deadlines diverge, how the misalignment creates security and budget risks, and the step-by-step checklist every IT manager needs to avoid a compliance crisis.
Android Auto Sideloading Still Works in 2026—Here’s What Windows Users Need to Know About the Risks
Android Authority reports that Android Auto’s sideloading loophole remains open in 2026, allowing installation of unofficial apps that play video and customize the dashboard. While the process is simple, it exposes drivers to distraction, malware, and privacy breaches—risks that extend to Windows PCs when phones are linked via Phone Link. This article breaks down what the report found, what it means for different types of Windows users, and how to stay safe.