Foxit Security
The latest Foxit Security coverage — news, analysis, and updates from the WindowsNews.AI desk.
Microsoft Defender Will Surface Purview IRM Triage Summaries in August 2026 Preview
In August 2026, a public preview will bring Purview Insider Risk Management's Data Security Triage Agent summaries into the Microsoft Defender alert queue. Security teams will get AI-driven incident narratives directly where they manage other threats, streamlining triage. Organizations should prepare now by tuning Purview policies and enabling preview features.
Outlook for iOS Will Finally Preview Protected PDFs — Here’s What Changes in 2026
Microsoft plans to add native preview support for MIP-protected PDFs in Outlook for iOS by July 2026, eliminating the need to open sensitive attachments in a separate app. The roadmap update promises a seamless, secure experience for enterprise users on iPhones and iPads.
Microsoft Purview 558681 Pours DLP Context Into Graph API Alerts
Microsoft is enriching Graph API security alerts with DLP rule-match details through Purview roadmap ID 558681. The change lets SIEM and SOAR tools consume sensitive information type, policy name, and other context directly, eliminating the need to manually correlate with the Purview activity explorer. Administrators should prepare parsers and update playbooks to take advantage of the new data stream.
Google’s July 2026 Pixel Patch Restores No-Wipe Android 17 Beta Exit
The July 2026 security update for Google Pixel phones, build CP2A.260705.006, reintroduces a no-wipe exit for Android 17 Beta 4 and 4.1 testers. Users can now install the stable Android 17 release over the air or via sideloading and then unenroll from the beta program without losing personal data.
Foxit Ships Urgent Patch for 30+ Security Holes in PDF Reader and Editor
Foxit Software patched over 30 vulnerabilities in Foxit PDF Reader and Editor on July 8, 2026. The fixes, which include critical remote code execution flaws like CVE-2026-57239, are available in versions 2026.1.2, 14.0.5, and 13.2.5. Users and enterprises must update immediately to protect against attacks that could hijack their systems via malicious PDFs.
How to Keep Using Remote Desktop on Windows 10 After July 2026: ESU and VPN Are Key
Windows 10 won't stop hosting Remote Desktop sessions after October 2025, but only Extended Security Updates and a VPN can keep it safe. The old practice of forwarding port 3389 must end—here's what home users, pros, and IT admins need to know for July 2026 and beyond.
Android's Open-Source Mirage: What It Means for Your Windows PC
Android's core is open source, but Google's proprietary services make most phones a closed ecosystem. This affects Windows users through cross-platform integration, privacy, and app availability. Understanding the distinction helps you make informed choices about your device and its trade-offs.
Deleting Microsoft Teams Free Can Erase Your Entire Microsoft Account
Deleting a Microsoft Teams Free account does not just remove the chat app; it permanently closes your entire Microsoft account, erasing emails, files, Xbox data, and purchases. This article explains the hidden consequences, how the integration came about, and offers step‑by‑step guidance on safeguarding your data before taking any action.
Windows Updates Demystified: Security, Preview, and Emergency Patches Explained
Windows Update now follows three distinct servicing lanes: mandatory security patches on Patch Tuesday, optional previews for early testing, and emergency out-of-band fixes. This guide breaks down each type, who should install them, and how to tailor your update strategy for maximum stability.
Critical SNMP Vulnerability in Schneider Electric Easergy Relays Opens Door to Grid Disruption
CISA has issued an advisory for a critical vulnerability in Schneider Electric Easergy MiCOM P40 relays that could allow remote attackers to execute code via SNMP. The flaw impacts industrial control systems used in electrical substations, and asset owners should apply firmware updates immediately. Windows administrators in connected IT environments must also take steps to segment networks and limit exposure.
OpenPLC v3 Flagged End-of-Life as Critical File-Write Vulnerability Surfaces — Upgrade to v4 Now, CISA Urges
CISA warns that OpenPLC v3, widely used for soft PLCs on Windows and other platforms, contains a critical file-upload flaw (CVE-2026-14480) with no patch coming. The only fix is upgrading to the newly released OpenPLC v4, forcing industrial operators and home users alike to plan immediate migrations or risk remote code execution via the web interface.
Schneider Electric Patches 7 Security Holes in PowerChute Serial Shutdown—Update Your UPS Software Now
Schneider Electric has fixed seven vulnerabilities (CVE-2026-2399 to CVE-2026-2405) in PowerChute Serial Shutdown by releasing version 1.5. All previous versions are affected, and users must update immediately to prevent potential local privilege escalation and code execution on Windows systems managing UPS devices.
Vishing Attackers to Bypass Microsoft 365 Passkeys, Hijack Enterprise Accounts Starting April 2026
A threat intelligence report reveals that the Pink extortion group is planning a voice-phishing campaign to hijack enterprise Microsoft 365 accounts by tricking users into enrolling attacker-controlled passkeys, bypassing multifactor authentication. Here’s how the attack works and what IT admins can do to protect their organizations before the campaign begins in April 2026.