GoKawiil
Tech News
Microsoft's latest Patch Tuesday addressed close to 1,000 vulnerabilities, but the scale of the update introduced new problems for some users. The company has since issued out-of-band emergency patches to correct issues caused by the original round of fixes.
A malware-as-a-service platform called VectraRAT is being sold on underground markets for roughly $250 monthly, giving buyers a Windows-based remote access implant, command-and-control infrastructure, and a management panel. The package effectively bundles everything needed to compromise and control enterprise Windows systems without requiring technical expertise from the attacker.
Microsoft has scheduled an event in San Francisco on October 7th to discuss how local AI will influence the next generation of PCs. CEO Satya Nadella and Windows/Surface chief Pavan Davuluri will attend, alongside Nvidia CEO Jensen Huang, hinting at a focus on RTX Spark PCs and possibly Surface Laptop Ultra pricing details.
Researchers at Lumen's Black Lotus Labs identified a previously undocumented malware framework, BambooToken, active since 2023, that in its 2024-2025 variants switched to the MQTT messaging protocol for command-and-control. Infected systems subscribe to unique topics on a central broker to receive operator commands and report status, and the malware has infected servers tied to mobile apps, legal, financial, and software development firms via side-loading disguised as Tendyron OnKey USB-token software or a fake Kingsoft Office suite.
Microsoft released an out-of-band patch to address problems introduced by its September 2026 Windows 11 update, which had shipped with new taskbar and Start menu customization features alongside nearly 1,000 security fixes. The rollout caused crashes on AMD Radeon GPUs, audio input/output failures, Remote Desktop instability, and Explorer black-screen issues after login. The emergency update addresses several of these regressions, though the AMD GPU crashes were not explicitly called out as fixed.
Microsoft released an emergency cumulative update, KB5129195, to fix several problems caused by September's Patch Tuesday release, which had patched nearly 1,000 vulnerabilities but broke Remote Desktop Services, Linux VM support, and some USB audio devices. The fix restores RDP connections, repairs the Host Compute Service used by apps like Claude Cowork to run Linux virtual machines, and partially restores 8-channel and 3D audio modes. However, AMD Radeon GPU crashes and File Explorer failures reported after the same update remain unresolved.
Microsoft has released an emergency out-of-band update to correct problems introduced by its September Patch Tuesday release, which fixed nearly 1,000 vulnerabilities but broke folder sharing on Hyper-V Linux virtual machines, disrupted Remote Desktop Services sessions, and caused issues with some USB audio devices. The new fix covers Windows 11 versions 26H1, 25H2, and 24H2, along with Windows Server 2025, 2022, and 2012 R2, plus LTSC editions of Windows 10.
Microsoft offers a downloadable Media Creation Tool that lets users create a bootable Windows 11 installation USB drive. The process involves running the tool as administrator, selecting a USB drive, and letting it download and write Windows 11 files, after which the drive can boot and install Windows 11 on another PC.
A tech explainer outlines the standard methods for closing Windows programs, from clicking the X button to using Alt+F4, and explains how some apps like Discord and Spotify minimize to the system tray instead of fully closing. It also covers alternative exit options like File > Quit menus and right-clicking tray icons, reserving true force-quitting for frozen, unresponsive applications.
Security researchers say attackers compromised HBO Max's official Reddit account and used it to post hundreds of fake ads linking to a lookalike site that runs a ClickFix scam. The scheme tricks visitors into copying and pasting a malicious command into their Terminal or Command Prompt, which silently installs info-stealing malware. Warner Bros. Discovery has not responded to requests for comment, and it's unclear how many users were affected.
Microsoft confirmed that its September 8 security update, KB5124008, is causing audio failures on legacy USB Audio Class 1.0 hardware such as older speakers, headsets, and microphones. Affected users may see no sound, unresponsive volume controls, or a 'Code 10' error in Device Manager. The company noted a temporary workaround: switching the audio mode to Stereo restores sound until an official fix arrives.
Microsoft has pushed emergency out-of-band updates for Windows 10, Windows 11, and Windows Server to resolve Remote Desktop Services instability caused by its September 2026 security patches. The bug had triggered RDP sign-in failures, unresponsive servers, and related issues in MMC, File Explorer, and the Windows Update page. Separate fixes for the update also address Hyper-V and USB audio problems reported on some Windows versions.