Windows Update

Because of the significance and the quantity of the holes that these updates fix, we recommend you take the time to check to see your computer is running Windows 11 or Windows 10 with ESU has completely updated.

In either operating system, go to Settings, Windows Update, check for updates, download and install all.

And also go to Settings, Updates, Advanced Options, Optional Updates, Driver Updates, download and install those.

That one with the advanced settings is...

If you remember my other story, I have LG UltraGear 48-inch monitors, not TVs.

And LG, being the spammer they are, had convinced Windows Update that it needed to install an update for the LG monitor, and what it installed was LG spam onto my Windows computer without permission.

Anyway, would it be rude if I went up to the LG booth and just asked them about these recordings and all these things?

They're not going to tell you anything.

And they're doing it differently than they've ever done it before because they have to keep everybody on their toes, [laughs] I guess.

Um, and so what they did today, instead of releasing it to Windows Update to everybody as a preview update, they released it to the release preview channel of the Windows Insider Program.

Um, so again, this is not the way things usually go, but this also corresponds to the schedule as I sort of expected it to go anyway, which was that in September we'll most likely get that preview update of 26H2, which you'll get if you have Windows 11 version 24H2 or 25H2.

Um, and then in October we'll probably get the general stable release or whatever.

Um, if you look at the settings here, it is gonna search in OneDrive, right? And I do have a bunch of stuff in OneDrive dating back decades, but, um, you know, I found almost 7,500 items already, so that's pretty good actually.

I would say, you know, Windows Search hasn't been very good for a long, long time, so that's kinda neat.

Um, Windows Update, w- that was maybe the first of the big changes that Microsoft implemented first.

Um, and there have been some updates since then as well, uh, interestingly.

Both hand attackers system privileges on Windows machines.

The first, CVE-2026-81963, sits in the Windows update stack.

It's a link-following flaw that lets an authorized attacker elevate privileges locally.

The second, CVE-2026-85880, is a heap-based buffer overflow in the Windows Advanced Local Procedure Call, or ALPC, credited to researchers at Volexity and Proofpoint.

And finally, for today, Security researchers have identified four previously unreported RevStealer-linked modules that remain on infected Windows systems even after the main InfoStealer deletes itself, extending the threat beyond the initial theft of credentials and crypto assets.

One module disables Windows Update and Microsoft Defender before launching a cryptocurrency miner, while others steal wallet data, hijack clipboard crypto addresses, or turn victims' machines into reverse proxies for attacker traffic.

The findings matter because the malware can look removed while persistence, defense evasion, and financial abuse continue in the background.

This concludes your daily briefing.