Microsoft Defender Antivirus

But if you kind of want a trimmed down Windows 11 image, I think Tiny11 Builder is not bad.

uh i don't know if i'd recommend it but it's a decent alternative let's just say that and as long as you don't use the core the core will strip out like the update windows update windows defender windows component store this is going to break so much stuff like this is really only meant for like a single use case for that system and that system is going to be very vulnerable so uh This, don't do.

Don't ever do Tiny 11 Core unless you know exactly what you're doing.

But the rest of this is not bad.

And that's antivirus.

Good thing is Windows has its built in Defender, Microsoft Defender, Windows Defender, whichever name you want to call it.

And it's honestly good for 90 percent of users, I would say.

It's all I use at home.

And it's one of those that's definitely improved over the years.

When it first came out, Windows Defender, definitely people were very skeptical of it.

You're going to police your own software.

You don't know what the issues are.

And although, as we've talked about before, those don't seem as horrifying as remote code execution, because who wants to have your computer executing code that some cretin managed to sneak into it? Still, elevation of privilege matters because...

The way Windows security hierarchy is set up, most users do not run with admin privileges.

And if something happens in your computer while you're logged in because of something you do, the bad guys have code running with your privilege, meaning restricted, not root, not admin.

So elevating that privilege to... to full access in order to do much more devastating permanent damage is crucial 677 problem problems were found and fixed just last tuesday that allowed exactly

Bleeping Computer covered that, writing, smart app control is a Windows 11 security feature that uses Microsoft's app intelligence services and code integrity features and works alongside Microsoft Defender and Smart Screen to block potentially harmful apps or binaries.

So basically, it's preventing you from running something that could damage you or your system.

so they so bleeping said according to the company microsoft on affected devices running windows 11 version 24 h2 and later the smart app control option is grayed out and cannot be changed microsoft said in an update to their and it's the the the patch for windows uh 11 security features kb 512-7648 advisory the They said, after installing this update, some devices might be unable to turn on Smart App Control in the Windows Security app if it has been turned off.

On affected devices, the option to turn on Smart App Control might be grayed out.

Do make sure you run malware checks once in a while.

I'd say antivirus checks, but every single Windows system out there has Windows Defender and that works shockingly well.

Do you know how many like old school tech nerds I would tell that nowadays you're fine with just Windows Defender and they'd look at me and just go, what? No.

what

are

You can scan, Kyle, this is one of those weird things that I don't know why they're doing it.

There's both Windows Security and Microsoft Defender.

They're complementary apps, but they overlap a lot.

And I've not been able to get a good answer on why you don't just have one or the, not you, but why Microsoft doesn't do one or the other.

some issues there so try the cold boot and see if that does it and as long as you can run a scan on security

the cold boot uh the text back in that unfortunately it didn't work oh it didn't or they knew about the cold boot trick

oh yes we know okay so then try running windows security chuck and see if that will do the complete full scan for you try the full scan instead of the quick scan the quick scan button is there but then i believe it says other options and you can go to full scan Okay, homework videos in here for you.

Didn't get to these, but there are some really cool ones there.

After that, I went on my phone and searched how to fix this issue.

I went through the whole process that was suggested and started Windows Defender to remove any bugs and checked my computer to see if there was anything that was downloaded illegally.

Then on September ninth, the update happened again.

This time, I didn't see the browser moving, but I immediately turned off the laptop.

Microsoft has not shared details on the specific exploitation vector or even the threat actors involved in this one.

But the two publicly disclosed zero days are CVE-2026-108398, that's a .NET framework feature s- uh, um, bypas- security feature bypass that can be used to run unauthorized applications and specifically bypass Windows Defender's application control enforcement.

It was disclosed by James Forshaw of Google Project Zero Day and CVE-2026-92707, a MessagePack C# denial of service vulnerability for prioritization.

Start with your actively exploited Windows Shell bypass, then work through the critical tier in order of exposure.