Loading story…
Microsoft’s latest Windows 11 preview releases for Insiders and optional updaters introduce native Sysmon and ship fixes for disruptive Windows Explorer/taskbar regressions. Windows 11 Insider Dev Channel Build 26300.7733 (KB5074178) adds Sysmon as a built-in Optional Feature, bringing deeper endpoint telemetry (e.g., process creation with command lines, network connections, driver loads, and file timestamp manipulation) intended to improve forensic visibility and incident investigation; Microsoft notes the integrated Sysmon conflicts with legacy standalone Sysmon installs, requiring removal of the older version before enabling the new feature.
Separately, the optional preview update KB5074105 for Windows 11 24H2/25H2 addresses a January cumulative-update regression where Explorer.exe could hang at startup—causing the taskbar to intermittently disappear and forcing users to restart Explorer via Task Manager—and also fixes reports of desktop icons being rearranged unexpectedly. ZDNET characterizes the upcoming February Windows 11 patch as feature-heavy and indicates KB5074105 is an early look at what will roll into the broader monthly release, while other referenced ZDNET pieces are general OS commentary/comparisons and not tied to the Sysmon integration or the KB5074105 Explorer fix; an Android 17 feature roundup is unrelated.
See real exploitation activity before you spend the cycle.
4 events from the most recent confirmed update back to the earliest known activity.
With the release of build 26300.7733, Microsoft noted that the integrated Sysmon feature conflicts with legacy standalone Sysmon deployments. Users must remove the standalone version before enabling the new optional feature.
By 2026-02-04, Microsoft had released Windows 11 Insider Dev Channel build 26300.7733 (KB5074178) from the 26H2 branch. The build added native Sysmon as a Windows Optional Feature, expanding built-in security telemetry for incident response and forensic analysis.
KB5074105 was positioned as a fix for problems introduced by the January cumulative update, including an intermittent missing taskbar at boot caused by Explorer.exe becoming unresponsive. It also addressed random desktop icon rearrangement and other responsiveness issues in File Explorer and the lock screen.
On 2026-01-29, Microsoft released optional preview update KB5074105 for Windows 11 versions 24H2 and 25H2 ahead of the February Patch Tuesday rollout. The update introduced multiple feature changes, including Cross Device Resume expansion, MIDI and Narrator improvements, Settings UI changes, Voice Access and Voice Typing updates, and broader Windows Hello ESS and AI agent support.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
3 references tracked. Mallory keeps watching after this page renders.
securityonline.info
Open sourcesecurityonline.info
Open sourcezdnet.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft reported **over 1 billion monthly active Windows 11 users**, but user sentiment remains negative, with prominent complaints focused on **buggy updates**, perceived reliability regressions, and unwanted feature changes (including AI-related additions). Microsoft leadership publicly acknowledged the feedback and said the company will prioritize **performance, reliability, and overall user experience** improvements to rebuild trust. Microsoft also released the **KB5074105** optional *non-security* preview cumulative update for Windows 11 (24H2/25H2), positioned as an end-of-month quality update ahead of the next Patch Tuesday. KB5074105 includes dozens of changes and targets operational issues including **boot problems** (e.g., startup hangs when Windows Boot Manager debugging is enabled and iSCSI boot failures with `Inaccessible Boot Device`), **sign-in issues** (including `Explorer.exe` hanging on first login under certain startup-app configurations), and **activation/license migration failures** during upgrades when devices cannot register with the Windows Activation server; the update is available via Windows Update or manual download from the Microsoft Update Catalog.
Jun 29, 2026
Microsoft released the optional Windows 11 preview cumulative update **KB5101684** for versions **24H2** and **25H2**, moving systems to builds `26100.8973` and `26200.8973` and delivering **42 fixes and feature changes** ahead of the next Patch Tuesday rollout. Among the most notable security-related additions, the update extends **Windows Hello Enhanced Sign-in Security (ESS)** to **external fingerprint readers**, broadening biometric protection beyond devices with built-in sensors, and adds an option to uninstall the **Image Generation AI model**. Microsoft is distributing some of the new capabilities gradually through **Controlled Feature Rollout**, so availability may vary by device. The release also fixes several enterprise-impacting Windows issues, including **false invalid-credential errors** during **File History** backups to **SMB** shares, **MDM-enrolled** devices incorrectly remaining marked as noncompliant after enrollment, and **DFS mapped-drive** files being mislabeled as files from the Internet. Additional changes include improved **Windows Search**, **File Explorer** updates, **precision touchpad gesture** controls, **Voice Access** enhancements such as speech filtering and Korean support, and revised update progress reporting; Microsoft said it is not aware of any known issues in KB5101684.
Jul 30, 2026
Microsoft released the mandatory Windows 11 cumulative update **KB5101650** for versions **25H2** and **24H2**, alongside **KB5099414** for **23H2**, as part of its latest Patch Tuesday rollout. The update advances Windows 11 builds to **26200.8875** and **26100.8875** for 25H2 and 24H2 and includes fixes for **571 vulnerabilities**, with security-critical items such as continued **Secure Boot** certificate deployment delivered in the normal rollout phase. Microsoft said 25H2 and 24H2 receive the same package because both are based on 24H2, and no new known issues were acknowledged for the release. Beyond security fixes, KB5101650 adds and expands several user-facing and reliability improvements, including broader availability of **Point-in-time restore**, the new accessibility feature **Screen Tint**, quieter **Widgets**, and more flexible update pausing. Microsoft also addressed Bluetooth pairing and audio issues, including improvements for AirPods and call handling, while fixing problems affecting **File Explorer** performance, `explorer.exe` stability, Recycle Bin file naming, taskbar badges, networking in virtualized environments, **WSL** VPN connectivity, printing, **BITS** shutdown delays, and GIF support in the emoji panel after a switch from Tenor to **GIPHY**. The update is being distributed automatically through Windows Update and is also available as an offline `.msu` installer through the Microsoft Update Catalog.
Jul 17, 2026