Loading story…
Microsoft is preparing Windows 11 26H2 as a stability-focused release delivered through its continuous-innovation and shared-servicing model. Windows 11 24H2, 25H2, and 26H2 share a codebase, fixes, and testing; eligible 24H2 and 25H2 devices are expected to move to 26H2 through a small enablement package, while older releases such as 23H2 require a full feature update. Features can be staged in a disabled state through cumulative updates and activated later, reducing the compatibility risk associated with major branch upgrades.
In Windows 11 Insider Experimental Preview Build 26340.9233 for 26H2, Microsoft is testing granular camera, microphone, and precise-location permissions for individual traditional desktop applications. The controls, available under Settings > Privacy & security, replace the prior device-wide model for these apps and support Microsoft’s Baseline Security Mode and user-consent initiatives. Microsoft cautioned that applications may appear under alternate or unsigned names because of shared components or browser-hosted technologies; the changes are being deployed through Controlled Feature Rollout and are not guaranteed to reach general availability.
See real exploitation activity before you spend the cycle.
7 events from the most recent confirmed update back to the earliest known activity.
The Experimental build began testing granular camera, microphone, and precise-location controls for traditional desktop applications, replacing the prior device-wide permission model. Users can grant or revoke permissions per application in Windows Settings, while existing permission decisions and enterprise policies remain supported.
Microsoft released Windows 11 version 26H2 Insider Experimental Preview Build 26340.9233 through an enablement package. The build introduced a WinUI-based AutoPlay dialog, an option to open apps maximized, per-desktop-app privacy permissions, File Explorer previews for downloaded non-HTML files, and several fixes.
Microsoft shipped Windows 11 version 24H2. The release subsequently experienced compatibility issues and regressions on some hardware that Microsoft continued addressing for about a year.
Microsoft announced and delivered its continuous innovation approach for Windows 11, enabling features and enhancements to be released more frequently through servicing updates in addition to annual feature updates.
Microsoft acknowledged reports that the August 2026 optional update KB5120998 could reset desktop wallpapers to solid black and revert custom cursors to an oversized default pointer. A fix had not been released at the time described.
Microsoft simplified the Windows Insider Program's channel lineup, distinguishing Beta and Experimental channels. It also added an Experimental feature-flags page and made it easier for participants to switch channels without wiping and reinstalling Windows.
Microsoft moved Windows 11 version 26H2 into the Windows Insider Release Preview Channel. It also began testing 26H2 ISO files and the Media Creation Tool ahead of a planned public rollout.
Vulnerabilities, threat actors, malware, products, organizations, and breaches Mallory has linked to this story.
See real exploitation activity behind this advisory so you can triage it against everything else in the queue.
9 references tracked. Mallory keeps watching after this page renders.
zdnet.fr
Open sourcewindowslatest.com
Open sourcesecurityonline.info
Open sourcewindowslatest.com
Open sourceblogs.windows.com
Open sourcebleepingcomputer.com
Open sourcewindowslatest.com
Open sourcelearn.microsoft.com
Open sourcesupport.microsoft.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft is testing new Windows 11 privacy controls that let users allow or block **individual Win32 desktop applications** from accessing the camera, microphone, location, and in some reports voice activation. The feature appeared in Windows 11 Insider Preview Build `26340.9212` for version `26H2` in the Experimental channel, where desktop apps can now trigger system permission prompts for camera and microphone access instead of relying on the long-standing shared device-wide toggles used for traditional Win32 software. The controls were not documented in Microsoft's release notes and were first spotted by community testers, with reports indicating the rollout is limited to a subset of Insider systems and may be tied to the `Win32SignatureIdentity` feature flag. If broadly released, the change would close a notable privacy gap between classic desktop programs and Microsoft Store apps, while the same test build also completes removal of the legacy `WMIC` command-line tool, a utility frequently abused by ransomware operators during post-compromise activity.
Aug 20, 2026
Microsoft detailed two Windows security initiatives—**Windows Baseline Security Mode** and **User Transparency and Consent**—aimed at making Windows 11 behave more like mobile platforms in how it gates access to sensitive resources. Under *User Transparency and Consent*, Windows will prompt users when applications request access to protected data and device features (e.g., files, camera, microphone) and when installers attempt to add additional software; decisions will be recorded so users can review and change permissions later, including revoking previously granted access. *Windows Baseline Security Mode* is intended to enable runtime integrity safeguards by default, allowing only properly signed applications, services, and drivers to run while still permitting user/IT-admin exceptions for operational needs. Microsoft positioned the changes under its **Secure Future Initiative** and aligned them with the *Windows Resiliency Initiative*, noting a phased rollout in partnership with developers and enterprises and building on prior controls such as *Smart App Control* and administrator protection.
Jun 29, 2026
Microsoft has officially announced the rollout of Windows 11 25H2, marking a significant update to its operating system with a focus on security improvements and a more efficient installation process. The update is being gradually released to both individual users and organizations, with the option to manually install it or wait for it to become available through standard update channels. Unlike previous annual updates, Windows 11 25H2 is designed to be ultra-compact, utilizing enablement packages (eKB) that are less than 200KB in size, allowing for a single-restart installation and minimizing downtime. This streamlined approach swaps out only the necessary files rather than replacing the entire system, resulting in a faster and more reliable update experience. Both Windows 11 25H2 and 24H2 now share the same code base, ensuring that they will receive identical cumulative updates, features, and fixes moving forward, though some features are exclusive to the 25H2 version. A key highlight of the 25H2 update is the introduction of significant advancements in build and runtime vulnerability detection, as well as the implementation of AI-assisted secure coding, which aims to proactively address and mitigate security threats within Microsoft’s software and services. For enterprise environments, the update brings support for Wi-Fi 7 and introduces an optional feature that allows IT administrators to remove select pre-installed Microsoft Store apps via Group Policy, enhancing customization and security posture. The update also removes legacy components such as PowerShell 2.0 and the Windows Management Instrumentation command-line (WMIC), reducing the attack surface and aligning with modern security standards. Microsoft emphasizes that these changes are part of its Secure Future Initiative, reflecting a broader commitment to improving the security and reliability of its platforms. The update resets the support lifecycle, granting another 36 months of support for Enterprise and Education editions, which is particularly relevant for organizations planning long-term deployments. While the update does not introduce major new features for consumers, its focus on security, stability, and manageability is expected to benefit both end users and IT departments. Microsoft advises that most users will not see the update immediately due to the gradual rollout, but it will become widely available through Windows Server Update Services (WSUS) by mid-October. The company also provides tools such as the Installation Assistant for those who wish to expedite the upgrade process. Overall, Windows 11 25H2 represents a strategic step forward in Microsoft’s efforts to deliver a secure, efficient, and manageable operating system for both consumers and enterprises.
Jun 29, 2026