windows

Microsoft has elevated Rust to Tier-1 status alongside C++, C#, and TypeScript, and detailed a new compiler backend linking Rust to MSVC.

Microsoft has pulled the WMIC command-line utility from Windows 11 24H2, 25H2, and 26H1 builds, ending a tool long abused by ransomware and other attackers.

A researcher known as Nightmare Eclipse disclosed an unpatched Windows Defender privilege-escalation flaw, saying Microsoft's legal threats left public disclosure as the only option.

Check Point traced CVE-2026-68820, a WinSock kernel flaw, to a North Korean campaign deploying the FudModule rootkit against defense contractors before Microsoft patched it.

Collabora, funded by Valve, has ported an early version of the open-source RADV Vulkan driver from Linux to Windows, reaching the point where it can launch Counter-Strike 2.

Announced at Build 2026, Coreutils for Windows packages a Rust uutils build of coreutils, findutils, and grep as a single native binary installable via WinGet, though the GitHub repo still labels it a preview.

June 2026's update tops the previous record of 177 CVEs and includes CVE-2026-45657, a wormable 9.8 kernel use-after-free.

Belgium's CCB warns the 9.8-rated Netlogon RCE is exploited in the wild, threatening domain controllers. Microsoft says it has no evidence.

At Build 2026 in San Francisco, Microsoft unveiled Project Polaris to replace GPT-4 Turbo in GitHub Copilot, open-sourced the Windows Agent Framework, and previewed the Windows Agent Runtime and Azure Agent Mesh.

Kaspersky found official DAEMON Tools Lite installers trojanized from April 8 to May 5, 2026, deploying a multi-stage backdoor to over a dozen targeted machines. CISA added CVE-2026-8398 to its KEV catalog on May 27.

A researcher named Chaotic Eclipse released a working exploit for an unpatched Windows privilege escalation flaw in the Cloud Filter driver, confirmed to grant SYSTEM access on fully patched Windows 11.

After a March 2026 launch that left users contending with broad ACL changes and stale sandbox profiles, OpenAI published a stricter design splitting Codex into offline and online local users with DPAPI-protected credentials and a command-runner handoff.