Cybersecurity Integrity
The latest Cybersecurity Integrity coverage — news, analysis, and updates from the WindowsNews.AI desk.
Windows 10 Home Users Get Security Updates Until October 2027: What the Silent ESU Extension Means for You
Microsoft has extended the Consumer ESU program for Windows 10 until October 12, 2027, giving enrolled users an extra year of security patches. The quiet update means home users can safely delay upgrading for two years total, though they should still plan for eventual migration to a modern OS.
How Windows 11 Passkeys Replace Passwords: Setup, Security, and What It Means for You
Windows 11 now fully supports passkeys via Windows Hello, letting users replace passwords with biometrics or PIN for phishing‑resistant sign‑ins. The feature, widely documented in January 2024, is built into Settings and syncs across Windows devices. Users can create and manage passkeys on supported sites, while admins gain group policies for enterprise control.
Fake Microsoft Teams 'Admin' Calls Deliver EtherRAT Malware in New Phishing Wave
A new social engineering campaign reported on July 6, 2026, uses fake Microsoft Teams calls from an external 'system administrator' to trick users into installing the EtherRAT remote access trojan. The attack starts with a phishing email, leverages live Teams calls for persuasion, and deploys legitimate remote access tools to maintain persistence. Both home users and IT administrators need to restrict external Teams access and heighten awareness to prevent compromise.
Microsoft Office 2026 Macro Alert Overhaul: Yellow Allows, Red Blocks – Here’s How It Works
Microsoft plans a 2026 overhaul of Office macro alerts, introducing yellow "Enable Content" bars for unblocked internet files and red bars for high-risk macros. The update also includes streamlined Mark of the Web removal tools, reducing clicks for trusted documents while maintaining strong malware defenses.
Go SSH Library Vulnerability CVE-2026-39827 Allows Attackers to Crash Windows Servers with Simple Memory Leak
Microsoft has disclosed CVE-2026-39827, a denial-of-service flaw in the Go SSH library that allows an authenticated attacker to crash Windows-based services via a memory leak. While the built-in Windows OpenSSH server is unaffected, many Go-powered tools that embed the library are vulnerable, requiring immediate vendor updates and proactive network hardening.
A Humanoid Robot Threw Kung Fu Kicks at Workers—Now IT Must Rethink Safety
A viral video from July 6, 2026 shows a humanoid robot performing kung fu kicks at workers, prompting an emergency stop. The incident exposes critical gaps in software, networking, and safety governance for IT teams managing robotics. This analysis offers concrete steps to prevent similar malfunctions.
User-Reported Scams Land Directly in Teams Admin Center’s Protection Reports
Microsoft has added user-reported security signals to Teams admin center’s Protection reports under Roadmap 536571. The feature allows IT teams to see when employees flag suspicious Teams messages as phishing or spam, enabling faster threat hunting and incident response. It requires Defender for Office 365 Plan 2 or equivalent licensing and is now generally available for commercial tenants.
Microsoft Ships Long-Awaited S/MIME Certificate Storage in New Outlook for Windows Contacts
Microsoft launched S/MIME certificate storage in the new Outlook for Windows contacts on July 6, 2026, closing a major feature gap for government and enterprise users. The update lets desktop users associate encryption certificates directly with contacts, enabling seamless encrypted email without workarounds. IT admins can now deploy the new Outlook with full S/MIME compliance in regulated environments.
Microsoft Targets May 2026 for LDAP-Based S/MIME Certificate Lookup in New Outlook for Windows
Microsoft has scheduled the long-awaited LDAP-based S/MIME certificate lookup feature for the new Outlook for Windows to reach general availability in May 2026. The update will allow corporate users to automatically retrieve encryption certificates from on-premises directory servers, closing a critical feature gap that has kept many enterprises on the classic Outlook client. IT admins should plan their migration strategies around this timeline, ensuring that S/MIME-dependent employees remain on classic Outlook until the feature is fully rolled out and tested.
Microsoft Teams Flooded with Fake IT Calls Spreading EtherRAT — Here’s What Admins Must Do Now
A wave of social engineering attacks on Microsoft Teams sees threat actors impersonating IT support to trick users into installing the EtherRAT remote access trojan. Security experts recommend administrators restrict high‑risk external chat and calling rather than cutting off all external communication, while training users to verify any unsolicited support requests through separate channels.
Your Windows 11 C Drive May Be Full Because of This One Log File—Here’s the Fix
Microsoft's optional June 2026 update (KB5095093) addresses a Windows 11 storage issue where the CapabilityAccessManager.db-wal log file grows excessively, consuming gigabytes of space. Users can recover lost space by installing the preview update or manually deleting the file. The fix will be included in July's Patch Tuesday.
Microsoft 365 Family Now $99.99/Year: 1TB OneDrive, Office, and Defender for Up to 6 People
Microsoft 365 Family continues to offer a comprehensive cloud and security bundle for up to six users at $99.99 per year as of July 2026. This guide details everything included, from OneDrive storage and Office apps to Microsoft Defender and Family Safety, along with practical steps to maximize value.
Advania’s 50% Take-Back Target: What the UK Refurb Hub Means for Your Next Windows Fleet
Scandinavian IT services giant Advania has pledged to take back half of all devices it sells and return them to the market as refurbished units by 2030, anchored by a new UK refurbishment centre. The move signals a strategic embrace of circular IT that could reshape enterprise hardware procurement and disposal, offering cost and sustainability benefits while raising fresh questions about data security and device readiness for businesses.