Vue lecture

Microsoft Adds Sysmon To Windows

Microsoft has finally delivered on its promise to integrate Sysmon -- the long-standing system monitoring tool from its Sysinternals suite -- directly into Windows, a move that should make life considerably easier for enterprise administrators who have struggled with deploying and managing the utility across thousands of endpoints. The functionality landed this week in Windows Insider builds 26300.7733 (Dev channel) and 26220.7752 (Beta channel). Sysmon allows administrators to capture system events through custom configuration files, filter for specific activity, and pipe the data into standard Windows event logs for pickup by security tools and SIEM pipelines. Mark Russinovich, Microsoft technical fellow and Winternals co-founder, has previously noted the lack of official customer support for Sysmon in production environments -- a gap this integration addresses. The feature ships disabled by default and requires PowerShell to enable. Microsoft notes that any existing Sysmon installation must be uninstalled before activating the built-in version.

Read more of this story at Slashdot.

  •  

Des mises à jour étendues de Windows 10 avec ConsumerESU

Suite à ce billet d’Octobre 2025 où j’expliquais que l’Europe allait avoir droit à des mises à jour étendues de Windows 10 et ce billet d’avril qui indique comment basculer vers Windows 11 avec Flyby11 pour un PC pas forcément jugé apte par Microsoft. Je reçois de nombreuses demandes au sujet des mises à jour de Windows 10 que Microsoft poursuit en Europe. Surtout de la part de personnes qui ont peur de l’option Flyby11 pour des raisons qui leurs sont propres.

Avant le passage de ConsumerESU

Avant le passage de ConsumerESU

ConsumerESU à la rescousse

Il existe une solution alternative qui permet de pousser facilement les mises à jour étendues de Windows 10 sur son poste avec ou SANS compte Microsoft. Il s’agit d’un script baptisé ConsumerESU qui active les ESU (Extended Security Updates) en quelques manipulations simples. Testé par mes soins suite à de nombreux témoignages, la méthode est simple et a déjà fait ses preuves. 

Première étape, on télécharge ConsumerESU sur Github. Sur la page, on clique sur <> code et on choisit l’option « Download ZIP ». Une fois le téléchargement terminé on extrait les fichiers dans un répertoire facile a retrouver.

Dans ce répertoire, on va simplement cliquer avec le bouton droit de la souris sur le fichier Consumer_ESU_Enrollment_run.cmd pour pouvoir choisir l’option « Exécuter en tant qu’administrateur« .  Le programme se met alors en route en ligne de commande et lance la procédure.

Suivez l’activité à l’écran et… c’est tout. Au bout de quelques instants, cela dépend de plusieurs paramètres mais n’excède pas quelques dizaines de secondes au pire sur un vieux Celeron, la machine vous propose d’appuyer sur une lettre pour quitter la fenêtre. Vous n’avez plus qu’à lancer vos mises à jour pour vérifier que tout fonctionne.

Après le passage de ConsumerESU

Après le passage de ConsumerESU

Si vous rencontrez un échec ou que vous avez des erreurs, ce qui peut arriver dans de rares cas et notamment si vous n’avez pas fait les dernières mises à jour de Windows 10 avant leur arrêt, vous pouvez regarder la documentation sur Github. Mais pour avoir exécuté le script ConsumerESU sur une douzaine de machines jusqu’à aujourd’hui, je n’ai pas eu de problèmes.

Des mises à jour étendues de Windows 10 avec ConsumerESU © MiniMachines.net. 2025

  •  

Microsoft is Experimenting With a Top Menu Bar for Windows 11

An anonymous reader shares a report: Microsoft's PowerToys team is contemplating building a top menu bar for Windows 11, much like Linux, macOS, or older versions of Windows. The menu bar, or Command Palette Dock as Microsoft calls it, would be a new optional UI that provides quick access to tools, monitoring of system resources, and much more. Microsoft has provided concept images of what it's looking to build, and is soliciting feedback on whether Windows users would use a PowerToy like this. "The dock is designed to be highly configurable," explains Niels Laute, a senior product manager at Microsoft. "It can be positioned on the top, left, right, or bottom edge of the screen, and extensions can be pinned to three distinct regions of the dock: start, center, and end."

Read more of this story at Slashdot.

  •  

Windows 11 Has Reached 1 Billion Users Faster Than Windows 10

An anonymous reader shares a report: Windows 11 now has one billion users. Microsoft hit the milestone during the recent holiday quarter, meaning Windows 11 has managed to reach one billion users faster than Windows 10 did nearly six years ago. "Windows reached a big milestone, 1 billion Windows 11 users," said Microsoft CEO Satya Nadella on the company's fiscal Q2, 2026 earnings call. "Up over 45 percent year-over-year." The growth of Windows 11 over the past quarter will be related to Microsoft's end of support for Windows 10, which also helped increase Microsoft's Windows OEM revenues.

Read more of this story at Slashdot.

  •  

PowerShell Architect Retires After Decades At the Prompt

Jeffrey Snover, the driving force behind PowerShell, has retired after a career that reshaped Windows administration. The Register reports: Snover's retirement comes after a brief sojourn at Google as a Distinguished Engineer, following a lengthy stint at Microsoft, during which he pulled the company back from imposing a graphical user interface (GUI) on administrators who really just wanted a command line from which to run their scripts. Snover joined Microsoft as the 20th century drew to a close. The company was all about its Windows operating system and user interface in those days -- great for end users, but not so good for administrators managing fleets of servers. Snover correctly predicted a shift to server datacenters, which would require automated management. A powerful shell... a PowerShell, if you will. [...] Over the years, Snover has dropped the occasional pearl of wisdom or shared memories from his time getting PowerShell off the ground. A recent favorite concerns the naming of Cmdlets and their original name in Monad: Function Units, or FUs. Snover wrote: "This abbreviation reflected the Unix smart-ass culture I was embracing at the time. Plus I was developing this in a hostile environment, and my sense of diplomacy was not yet fully operational." Snover doubtless has many more war stories to share. In the meantime, however, we wish him well. Many admins owe Snover thanks for persuading Microsoft that its GUI obsession did not translate to the datacenter, and for lengthy careers in gluing enterprise systems together with some scripted automation.

Read more of this story at Slashdot.

  •  

Microsoft Forced to Issue Emergency Out-of-Band Windows Update

The senior editor at the blog Windows Central decries two serious Windows issues "that were not spotted by Microsoft during testing, and are so severe that the company has now issued an emergency fix to address the problems." Microsoft's first update for Windows 11 in 2026 has already caused two major issues that saw users unable to fully shutdown their PCs or sign-in into a device when using Remote Desktop... Being unable to shut down your PC due to a recent OS update is a huge oversight on Microsoft's part, but this is the latest in a long list of updates over the last year to cause a major issue like this... Other issues that have cropped up in Windows 11 in the last year include a bug that caused Task Manager to fail to close when the user exited the application, causing system resources to lock up after a prolonged period of time if the user had opened and closed Task Manager multiple times in a session. Another update caused saw File Explorer flashbang users with a white screen when opening it in dark mode, which appeared in an update that was supposed to improve dark mode on Windows 11... For whatever reason, the Windows Insider Program doesn't appear to be working anymore, as severe bugs are somehow making it into shipping versions of the OS. "The out of band updates, KB5077744 and KB5077797, are available now via Windows Update and is rolling out to everybody," they write. "Once installed, your PC should go back to being able to shut down successfully, and signing-in via Remote Desktop should work again." Microsoft has also officially acknowledged a third bug which crashes Outlook Classic when using POP accounts, according to the blog Windows Latest, which adds that that bug has not yet been fixed. They've also identified other minor bugs, including "a black screen problem in Windows 11 KB5074109... either due to the update itself or some compatibility issues with GPU drivers." After you install the January 2026 Update, Windows triggers random black screens where the desktop freezes for a second or two, the display goes black, then everything comes back. I can't pinpoint any specific configuration, but I can confirm the black screen issue has been observed on a small subset of PCs with both Nvidia and AMD GPUs. After you install the January 2026 Update, Windows triggers random black screens where the desktop freezes for a second or two, the display goes black, then everything comes back.

Read more of this story at Slashdot.

  •  

Patch Tuesday Update Makes Windows PCs Refuse To Shut Down

A recent Microsoft Patch Tuesday update has introduced a bug in Windows 11 23H2 that causes some PCs to refuse to shut down or hibernate, "no matter how many times you try," reports The Register. From the report: In a notice on its Windows release health dashboard, Microsoft confirmed that some PCs running Windows 11 23H2 might fail to power down properly after installing the latest security updates. Instead of slipping into shutdown or hibernation, affected machines stay stubbornly awake, draining batteries and ignoring shutdown like they have a mind of their own and don't want to experience temporary non-existence. The bug appears to be tied to Secure Launch, a security feature that uses virtualization-based protections to ensure only trusted components load during boot. On systems with Secure Launch enabled, attempts to shut down, restart, or hibernate after applying the January patches may fail to complete. From the user's perspective, everything looks normal -- until the PC keeps running anyway, refusing to be denied life. Microsoft says that entering the command "shutdown /s /t 0" at the command prompt will, in fact, force your PC to turn off, whether it wants to or not. "Until this issue is resolved, please ensure you save all your work, and shut down when you are done working on your device to avoid the device running out of power instead of hibernating," Microsoft said.

Read more of this story at Slashdot.

  •  

Latest SteamOS Beta Now Includes NTSYNC Kernel Driver

Valve has added the NTSYNC kernel driver to the SteamOS 3.7.20 beta, laying the groundwork for improved Windows game synchronization performance via Wine and Proton. Phoronix reports: For gearing up for that future Proton NTSYNC support, SteamOS 3.7.20 enables the NTSYNC kernel driver and loads the module by default. Most Linux distributions are at least already building the NTSYNC kernel module though there's been different efforts on how to handle ensuring it's loaded when needed. The presence of the NTSYC kernel driver is the main highlight of the SteamOS 3.7.20 beta now available for testing.

Read more of this story at Slashdot.

  •  

Everyone hates OneDrive, Microsoft's cloud app that steals then deletes all your files - Boing Boing

Des nouvelles de cette saloperie de Windows 11 : Non seulement Microsoft utilise des dark patterns pour inciter les utilisateurs à autoriser Microsoft à récupérer vos fichiers privés, mais en prime si vous supprimez vos fichiers de OneDrive, cela les supprime localement.
C'est en gros le fonctionnement d'un ransomeware: Il utilise de l'ingénierie sociale pour récupérer vos fichiers, et vous les fait perdre si vous essayez de vous échapper du système.
Franchement, si vous le pouvez, virez Windows.
(Permalink)
  •  

Comment le fameux « écran bleu de la mort » de Windows est devenu l’arme des hackers pour pirater des hôtels

Dans un article de blog publié le 5 janvier 2026, les chercheurs de l’entreprise de cybersécurité Securonix mettent en lumière une nouvelle campagne cybercriminelle visant en particulier les établissements hôteliers européens.​ Baptisée PHALT#BLYX, cette opération dissimule son piège derrière un faux écran bleu de la mort de Windows.

  •  
❌