Loading story…
Microsoft has resolved a compatibility issue affecting Bluetooth and integrated audio devices on systems with Dirac audio software, allowing upgrades to Windows 11 24H2. The issue, caused by the cridspapo.dll component, previously led to malfunctioning speakers and unrecognized audio devices. A new driver update addresses the problem, and the upgrade block was removed as of September 11, 2025.
Mallory correlates global threat intelligence with your attack surface — know if you’re exposed before adversaries strike.
1 event from the most recent confirmed update back to the earliest known activity.
Initial story creation
3 references tracked. Mallory keeps watching after this page renders.
securityonline.info
Open sourcebleepingcomputer.com
Open sourcebleepingcomputer.com
Open sourceMap indicators from this story to your assets and identify affected systems in minutes.
Every observed campaign, victim, and pivot linked to actors named in this story.
Malware, exploits, and IOCs connected to the activity described here.
YARA, Sigma, and Snort rules deployed to your SIEM as soon as they’re published.
Get matching new stories delivered to your team as they break — not the next morning.
Ask questions about this story and take action on the answers.
Other stories Mallory is tracking that overlap on entities, sources, or topic labels.
Microsoft has confirmed three known issues affecting **Windows 11 26H2**, which shares its servicing branch with 25H2 and 24H2. A September update can break USB Audio Class 1.0 devices, removing audio input and output and potentially freezing or crashing Sound settings. Enterprise devices using Active Directory and Credential Guard can also fail to sign in when Machine Identity Isolation causes machine accounts to lose their secure channel. A separate desktop-loading issue, first linked to the August non-security preview update `KB5120998`, can leave some users at a black screen after sign-in because the desktop session does not automatically load. The issue particularly affects Azure Virtual Desktop hosts using FSLogix profiles and may generate Windows Explorer crashes in the Application event log; Windows Server is not affected. Microsoft has provided Known Issue Rollback Group Policy packages for affected enterprise versions, while users can manually start `explorer.exe` through Task Manager; it has marked this issue mitigated and is developing a permanent update.
Oct 2, 2026
Microsoft confirmed that September Windows 11 security updates **KB5124008** and **KB5124012** can disable USB Audio Class 1.0 devices on Windows 11 24H2 and later systems. Affected devices may fail to start with Device Manager error `Code 10`, produce no sound, and leave volume controls or Sound settings unresponsive; microphones, 3D audio, and multichannel configurations are also affected. Organizations have reported that changing multichannel devices to 2-channel mode can restore service, but Microsoft has not released a permanent fix. KB5124008, which advances Windows 11 25H2 and 24H2 systems to builds 26200.9445 and 26100.9445, respectively, has also been confirmed to disrupt applications using HCS-managed Linux VMs with Plan9 shared folders, including Anthropic Claude Cowork workspace access, and to cause Remote Desktop Services instability. Additional reports cite Explorer crashes or black screens in virtual-desktop and profile-container deployments, File History failures with external drives, and AMD Radeon driver timeouts. Microsoft is investigating the issues; enterprises should test the updates against USB audio, VDI, RDS, Linux VM, backup, and AMD-dependent workflows while weighing mitigations against the updates' security fixes.
Sep 16, 2026
Microsoft released the mandatory Windows 11 cumulative update **KB5101650** for versions **25H2** and **24H2**, alongside **KB5099414** for **23H2**, as part of its latest Patch Tuesday rollout. The update advances Windows 11 builds to **26200.8875** and **26100.8875** for 25H2 and 24H2 and includes fixes for **571 vulnerabilities**, with security-critical items such as continued **Secure Boot** certificate deployment delivered in the normal rollout phase. Microsoft said 25H2 and 24H2 receive the same package because both are based on 24H2, and no new known issues were acknowledged for the release. Beyond security fixes, KB5101650 adds and expands several user-facing and reliability improvements, including broader availability of **Point-in-time restore**, the new accessibility feature **Screen Tint**, quieter **Widgets**, and more flexible update pausing. Microsoft also addressed Bluetooth pairing and audio issues, including improvements for AirPods and call handling, while fixing problems affecting **File Explorer** performance, `explorer.exe` stability, Recycle Bin file naming, taskbar badges, networking in virtualized environments, **WSL** VPN connectivity, printing, **BITS** shutdown delays, and GIF support in the emoji panel after a switch from Tenor to **GIPHY**. The update is being distributed automatically through Windows Update and is also available as an offline `.msu` installer through the Microsoft Update Catalog.
Jul 17, 2026