Microsoft has fixed an issue that left the Smart App Control security feature grayed out and unable to be turned on for some Windows 11 24H2+ devices after installing the October 2026 KB5127648 update. The company says the fix is included in the KB5127936 preview update released October 28, 2026, and devices that already had Smart App Control enabled were never affected. Microsoft also published a registry-edit workaround for enterprise admins who prefer to wait for next month's cumulative update rather than install the preview patch.
bleepingcomputer.com
· 2026-11-02
NordVPN's Threat Intelligence team identified malicious GitHub repositories disguised as the KyttyPS5 and AnyPS5 PlayStation 5 emulators. The fake projects install malware that adds exclusion rules to Microsoft Defender before deploying a program researchers suspect steals passwords and other personal data, and a cleanup script then erases its own traces.
techspot.com
· 2026-10-29
NordVPN's Threat Intelligence team identified malicious GitHub repositories posing as popular PS5 emulators like Kyttyps5 and AnyPS5. Once downloaded, the malware disables Microsoft Defender scanning, deploys an infostealer to harvest passwords and personal data, then deletes its own traces. NordVPN CTO Marijus Briedis says the fake software is designed to appear legitimate to emulation enthusiasts who routinely run unsigned files.
engadget.com
· 2026-10-28
Microsoft has expanded Microsoft Defender, its anti-malware and endpoint security product, to support major Linux distributions for enterprise use. The Linux version includes a next-generation antivirus engine, vulnerability management, device inventory, and threat-hunting tools, mirroring capabilities already available on Windows.
techspot.com
· 2026-10-16
Microsoft says its October KB5127648 security update for Windows 11, version 24H2 and later, can leave the Smart App Control option grayed out so it can't be switched on if it was previously off. Devices that already had Smart App Control enabled are unaffected. No permanent fix exists yet, but Microsoft has published registry edits and Group Policy settings administrators can use to restore the toggle.
bleepingcomputer.com
· 2026-10-16
Microsoft has launched a public preview extending Defender for Endpoint to Linux desktop distributions including Ubuntu, Debian, Fedora, and RHEL, not just servers. The expanded offering includes antivirus, endpoint detection and response, vulnerability management, threat hunting, and device isolation, using the same deployment methods as server onboarding. Access requires a Microsoft Defender for Endpoint Plan 2 or Microsoft 365 E5/E7 subscription.
linux.slashdot.org
· 2026-10-14
NTDEV's open-source Tiny11 Builder now includes a GUI, simplifying the process of creating slimmed-down Windows 11 installation images from official Microsoft ISOs. The tool uses PowerShell scripts and DISM to strip preinstalled apps, services, and components, offering both a standard Tiny11 build that retains Windows Update and Defender, and a more extreme Tiny11 Core variant that removes them entirely.
techspot.com
· 2026-10-13
Security researcher Abdelhamid Naceri published a proof-of-concept called BigDiskBuster that stops Microsoft Defender from receiving signature updates without exploiting any vulnerability. The roughly 300-line C++ tool monitors the C: drive for Defender update activity and fills nearly all free disk space with a hidden file, causing each update attempt to fail while Defender's service and real-time protection keep running normally. LevelBlue researchers reproduced the technique after the original GitHub page was taken down, confirming it creates what they called a 'silent detection gap.'
darkreading.com
· 2026-10-06
Microsoft has released WSL Containers to general availability, letting Windows 11 developers build, run and deploy Linux containers natively through Windows Subsystem for Linux. The update adds a wslc.exe management tool, GPU support, networking improvements, health checks, storage mounts, and integration with Microsoft Defender for Endpoint and Intune. Microsoft says file access from Linux environments to Windows storage can now run up to twice as fast, though Compose support is still missing and listed as a priority.
linux.slashdot.org
· 2026-09-29
Microsoft has released WSL Containers as a generally available feature, letting users run Linux containers on Windows via the wsl --update command. The update adds a new wslc.exe command-line tool (aliased as container.exe), a WSL Containers API for Windows apps, and previously-missing features like container restarts, file copying, health checks, and network commands.
bleepingcomputer.com
· 2026-09-29
Windows 11 includes Microsoft Defender, a free antivirus tool within Windows Security that automatically scans for threats and logs its findings under Virus & threat protection. Users can review allowed threats and protection history, run a deeper Full scan, or use an offline scan via Windows Recovery Environment to catch malware that hides from standard scans. The Firewall & network protection settings should also be checked to ensure all three connection types are protected.
engadget.com
· 2026-09-19
Microsoft has fixed a glitch that made the Windows Security app falsely warn users that Defender Antivirus was disabled, even though it was running normally. The fix arrived in Defender Antivirus update version 4.18.26080.4, released September 17, after the problem had persisted since at least June in Windows Insider builds.
bleepingcomputer.com
· 2026-09-18
GoKawiil