Vue normale

En voulant s’améliorer, le Bloc-notes de Microsoft s’est fragilisé

11 février 2026 à 14:37

Quelques mois à peine après avoir intégré la prise en charge complète de Markdown dans son application Bloc‑notes, Microsoft révèle avoir identifié une faille permettant à cette fonctionnalité d’être exploitée pour exécuter du code à distance.

Microsoft Begins the First-Ever Secure Boot Certificate Swap Across Windows Ecosystem

Par : msmash
10 février 2026 à 18:00
Microsoft has begun automatically replacing the original Secure Boot security certificates on Windows devices through regular monthly updates, a necessary move given that the 15-year-old certificates first issued in 2011 are set to expire between late June and October 2026. Secure Boot, which verifies that only trusted and digitally signed software runs before Windows loads, became a hardware requirement for Windows 11. A new batch of certificates was issued in 2023 and already ships on most PCs built since 2024; nearly all devices shipped in 2025 include them by default. Older hardware is now receiving the updated certificates through Windows Update, starting last month's KB5074109 release for Windows 11. Devices that don't receive the new certificates before expiration will still function but enter what Microsoft calls a "degraded security state," unable to receive future boot-level protections and potentially facing compatibility issues down the line. Windows 10 users must enroll in Microsoft's paid Extended Security Updates program to get the new certificates. A small number of devices may also need a separate firmware update from their manufacturer before the Windows-delivered certificates can be applied.

Read more of this story at Slashdot.

Microsoft dials up the nagging in Windows, calls it security • The Register

10 février 2026 à 17:00
Windows a déjà un problème de sécurité À CAUSE des popups ("popup fatigue" qui fait que les utilisateurs cliquent désormais aveuglément sur les popups de confirmation, par exemple l'UAC).
La solution de Microsoft ?
ENCORE PLUS DE POPUPS! 🤦🏻‍♂️
(Permalink)

Microsoft Adds Sysmon To Windows

Par : msmash
5 février 2026 à 00:25
Microsoft has finally delivered on its promise to integrate Sysmon -- the long-standing system monitoring tool from its Sysinternals suite -- directly into Windows, a move that should make life considerably easier for enterprise administrators who have struggled with deploying and managing the utility across thousands of endpoints. The functionality landed this week in Windows Insider builds 26300.7733 (Dev channel) and 26220.7752 (Beta channel). Sysmon allows administrators to capture system events through custom configuration files, filter for specific activity, and pipe the data into standard Windows event logs for pickup by security tools and SIEM pipelines. Mark Russinovich, Microsoft technical fellow and Winternals co-founder, has previously noted the lack of official customer support for Sysmon in production environments -- a gap this integration addresses. The feature ships disabled by default and requires PowerShell to enable. Microsoft notes that any existing Sysmon installation must be uninstalled before activating the built-in version.

Read more of this story at Slashdot.

Des mises à jour étendues de Windows 10 avec ConsumerESU

2 février 2026 à 16:09

Suite à ce billet d’Octobre 2025 où j’expliquais que l’Europe allait avoir droit à des mises à jour étendues de Windows 10 et ce billet d’avril qui indique comment basculer vers Windows 11 avec Flyby11 pour un PC pas forcément jugé apte par Microsoft. Je reçois de nombreuses demandes au sujet des mises à jour de Windows 10 que Microsoft poursuit en Europe. Surtout de la part de personnes qui ont peur de l’option Flyby11 pour des raisons qui leurs sont propres.

Avant le passage de ConsumerESU

Avant le passage de ConsumerESU

ConsumerESU à la rescousse

Il existe une solution alternative qui permet de pousser facilement les mises à jour étendues de Windows 10 sur son poste avec ou SANS compte Microsoft. Il s’agit d’un script baptisé ConsumerESU qui active les ESU (Extended Security Updates) en quelques manipulations simples. Testé par mes soins suite à de nombreux témoignages, la méthode est simple et a déjà fait ses preuves. 

Première étape, on télécharge ConsumerESU sur Github. Sur la page, on clique sur <> code et on choisit l’option « Download ZIP ». Une fois le téléchargement terminé on extrait les fichiers dans un répertoire facile a retrouver.

Dans ce répertoire, on va simplement cliquer avec le bouton droit de la souris sur le fichier Consumer_ESU_Enrollment_run.cmd pour pouvoir choisir l’option « Exécuter en tant qu’administrateur« .  Le programme se met alors en route en ligne de commande et lance la procédure.

Suivez l’activité à l’écran et… c’est tout. Au bout de quelques instants, cela dépend de plusieurs paramètres mais n’excède pas quelques dizaines de secondes au pire sur un vieux Celeron, la machine vous propose d’appuyer sur une lettre pour quitter la fenêtre. Vous n’avez plus qu’à lancer vos mises à jour pour vérifier que tout fonctionne.

Après le passage de ConsumerESU

Après le passage de ConsumerESU

Si vous rencontrez un échec ou que vous avez des erreurs, ce qui peut arriver dans de rares cas et notamment si vous n’avez pas fait les dernières mises à jour de Windows 10 avant leur arrêt, vous pouvez regarder la documentation sur Github. Mais pour avoir exécuté le script ConsumerESU sur une douzaine de machines jusqu’à aujourd’hui, je n’ai pas eu de problèmes.

Des mises à jour étendues de Windows 10 avec ConsumerESU © MiniMachines.net. 2025

Microsoft is Experimenting With a Top Menu Bar for Windows 11

Par : msmash
30 janvier 2026 à 14:40
An anonymous reader shares a report: Microsoft's PowerToys team is contemplating building a top menu bar for Windows 11, much like Linux, macOS, or older versions of Windows. The menu bar, or Command Palette Dock as Microsoft calls it, would be a new optional UI that provides quick access to tools, monitoring of system resources, and much more. Microsoft has provided concept images of what it's looking to build, and is soliciting feedback on whether Windows users would use a PowerToy like this. "The dock is designed to be highly configurable," explains Niels Laute, a senior product manager at Microsoft. "It can be positioned on the top, left, right, or bottom edge of the screen, and extensions can be pinned to three distinct regions of the dock: start, center, and end."

Read more of this story at Slashdot.

Windows 11 Has Reached 1 Billion Users Faster Than Windows 10

Par : msmash
29 janvier 2026 à 16:12
An anonymous reader shares a report: Windows 11 now has one billion users. Microsoft hit the milestone during the recent holiday quarter, meaning Windows 11 has managed to reach one billion users faster than Windows 10 did nearly six years ago. "Windows reached a big milestone, 1 billion Windows 11 users," said Microsoft CEO Satya Nadella on the company's fiscal Q2, 2026 earnings call. "Up over 45 percent year-over-year." The growth of Windows 11 over the past quarter will be related to Microsoft's end of support for Windows 10, which also helped increase Microsoft's Windows OEM revenues.

Read more of this story at Slashdot.

Que se passe-t-il avec WinRAR, visé par une alerte de sécurité Google ?

28 janvier 2026 à 20:10

Qui ne connaît pas WinRAR ? Le célèbre outil d'archivage de fichiers est très populaire sur Windows. Connu des particuliers, il l'est aussi des pirates. D'ailleurs, ces derniers exploitent une vulnérabilité repérée il y a plusieurs mois.

Cet incident sérieux avec WinRAR rappelle l’importance de bien garder ses logiciels à jour

28 janvier 2026 à 14:31

Qui ne connaît pas WinRAR ? Le célèbre outil d'archivage de fichiers est très populaire sur Windows. Connu des particuliers, il l'est aussi des pirates. D'ailleurs, ces derniers exploitent une vulnérabilité repérée il y a plusieurs mois.

Alerte de Google sur WinRAR : téléchargez la mise à jour ou passez à 7-Zip

28 janvier 2026 à 13:25

Qui ne connaît pas WinRAR ? Le célèbre outil d'archivage de fichiers est très populaire sur Windows. Connu des particuliers, il l'est aussi des pirates. D'ailleurs, ces derniers exploitent une vulnérabilité repérée il y a plusieurs mois.

Comment empêcher Microsoft (et potentiellement le FBI) de détenir la clé qui déchiffre votre PC ?

27 janvier 2026 à 15:25

Le 23 janvier 2026, Microsoft avouait avoir transmis les clés de déchiffrement de plusieurs PC Windows dans le cadre d'une enquête du FBI. Une collaboration rendue possible grâce aux paramètres par défaut du logiciel de chiffrement BitLocker.

PowerShell Architect Retires After Decades At the Prompt

Par : BeauHD
23 janvier 2026 à 22:40
Jeffrey Snover, the driving force behind PowerShell, has retired after a career that reshaped Windows administration. The Register reports: Snover's retirement comes after a brief sojourn at Google as a Distinguished Engineer, following a lengthy stint at Microsoft, during which he pulled the company back from imposing a graphical user interface (GUI) on administrators who really just wanted a command line from which to run their scripts. Snover joined Microsoft as the 20th century drew to a close. The company was all about its Windows operating system and user interface in those days -- great for end users, but not so good for administrators managing fleets of servers. Snover correctly predicted a shift to server datacenters, which would require automated management. A powerful shell... a PowerShell, if you will. [...] Over the years, Snover has dropped the occasional pearl of wisdom or shared memories from his time getting PowerShell off the ground. A recent favorite concerns the naming of Cmdlets and their original name in Monad: Function Units, or FUs. Snover wrote: "This abbreviation reflected the Unix smart-ass culture I was embracing at the time. Plus I was developing this in a hostile environment, and my sense of diplomacy was not yet fully operational." Snover doubtless has many more war stories to share. In the meantime, however, we wish him well. Many admins owe Snover thanks for persuading Microsoft that its GUI obsession did not translate to the datacenter, and for lengthy careers in gluing enterprise systems together with some scripted automation.

Read more of this story at Slashdot.

Microsoft remet de l’ordre dans Windows : le premier bug notoire de 2026 a été rectifié

19 janvier 2026 à 09:15

Microsoft vient de publier une salve de correctifs d’urgence pour réparer le bug introduit par le premier Patch Tuesday de 2026, qui coupait l’accès à certains environnements Windows dans le cloud et empêchait l’extinction correcte de certains PC.​

Microsoft Forced to Issue Emergency Out-of-Band Windows Update

18 janvier 2026 à 19:34
The senior editor at the blog Windows Central decries two serious Windows issues "that were not spotted by Microsoft during testing, and are so severe that the company has now issued an emergency fix to address the problems." Microsoft's first update for Windows 11 in 2026 has already caused two major issues that saw users unable to fully shutdown their PCs or sign-in into a device when using Remote Desktop... Being unable to shut down your PC due to a recent OS update is a huge oversight on Microsoft's part, but this is the latest in a long list of updates over the last year to cause a major issue like this... Other issues that have cropped up in Windows 11 in the last year include a bug that caused Task Manager to fail to close when the user exited the application, causing system resources to lock up after a prolonged period of time if the user had opened and closed Task Manager multiple times in a session. Another update caused saw File Explorer flashbang users with a white screen when opening it in dark mode, which appeared in an update that was supposed to improve dark mode on Windows 11... For whatever reason, the Windows Insider Program doesn't appear to be working anymore, as severe bugs are somehow making it into shipping versions of the OS. "The out of band updates, KB5077744 and KB5077797, are available now via Windows Update and is rolling out to everybody," they write. "Once installed, your PC should go back to being able to shut down successfully, and signing-in via Remote Desktop should work again." Microsoft has also officially acknowledged a third bug which crashes Outlook Classic when using POP accounts, according to the blog Windows Latest, which adds that that bug has not yet been fixed. They've also identified other minor bugs, including "a black screen problem in Windows 11 KB5074109... either due to the update itself or some compatibility issues with GPU drivers." After you install the January 2026 Update, Windows triggers random black screens where the desktop freezes for a second or two, the display goes black, then everything comes back. I can't pinpoint any specific configuration, but I can confirm the black screen issue has been observed on a small subset of PCs with both Nvidia and AMD GPUs. After you install the January 2026 Update, Windows triggers random black screens where the desktop freezes for a second or two, the display goes black, then everything comes back.

Read more of this story at Slashdot.

Patch Tuesday Update Makes Windows PCs Refuse To Shut Down

Par : BeauHD
17 janvier 2026 à 01:25
A recent Microsoft Patch Tuesday update has introduced a bug in Windows 11 23H2 that causes some PCs to refuse to shut down or hibernate, "no matter how many times you try," reports The Register. From the report: In a notice on its Windows release health dashboard, Microsoft confirmed that some PCs running Windows 11 23H2 might fail to power down properly after installing the latest security updates. Instead of slipping into shutdown or hibernation, affected machines stay stubbornly awake, draining batteries and ignoring shutdown like they have a mind of their own and don't want to experience temporary non-existence. The bug appears to be tied to Secure Launch, a security feature that uses virtualization-based protections to ensure only trusted components load during boot. On systems with Secure Launch enabled, attempts to shut down, restart, or hibernate after applying the January patches may fail to complete. From the user's perspective, everything looks normal -- until the PC keeps running anyway, refusing to be denied life. Microsoft says that entering the command "shutdown /s /t 0" at the command prompt will, in fact, force your PC to turn off, whether it wants to or not. "Until this issue is resolved, please ensure you save all your work, and shut down when you are done working on your device to avoid the device running out of power instead of hibernating," Microsoft said.

Read more of this story at Slashdot.

Un bug se cache dans le premier patch Windows de 2026 : voici comment éviter la mauvaise surprise

16 janvier 2026 à 11:24

/ Igor Zhukov

Microsoft a publié le 13 janvier 2026 un correctif de sécurité qui provoque instantanément des problèmes de connexion sur l’application Windows App.

❌