LIVE · cybersecurity feed
Live wire
patch

Microsoft releases emergency Windows updates to fix RDS failures

Microsoft has released emergency out-of-band updates for various Windows versions to address critical issues, including Remote Desktop Services (RDS) failures, Hyper-V problems, and USB audio malfunctions. These issues were introduced by the security updates deployed earlier in September 2026.

ZeroDay News ·

Source: BleepingComputer

Photo: Ank Kumar (CC BY-SA 4.0) via Wikimedia Commons

Microsoft has released emergency out-of-band updates for various Windows versions to address critical issues, including Remote Desktop Services (RDS) failures, Hyper-V problems, and USB audio malfunctions. These issues were introduced by the security updates deployed earlier in September 2026.

The September security updates caused widespread instability in Remote Desktop Services on affected systems, leading to failures in RDP connections and sign-ins, and in some instances, rendering servers unresponsive. Microsoft had previously acknowledged these problems following numerous reports from Windows administrators. Related components such as Microsoft Management Console (MMC), RDS Licensing Diagnoser, File Explorer, and the Windows Update page could also become unresponsive on affected systems.

The new out-of-band updates, released on September 14, are intended to resolve these issues. Specific updates include KB5129194 for Windows 11 26H1, KB5129195 for Windows 11 24H2 and 25H2, and KB5129236 for Windows 10 21H2 and 22H2. For server environments, KB5129235 addresses issues on Windows Server 2025, while KB5129237 targets Windows Server 2022. These server updates specifically fix RDS failures caused by KB5122871 on Windows Server 2025 and KB5122882 on Windows Server 2022.

Prior to the release of these permanent fixes, Microsoft had offered Group Policy mitigations for affected Windows and Windows Server systems. Administrators also found that uninstalling the problematic September security updates restored Remote Desktop functionality, though this action also removed the security patches included in those updates.

The new updates are available through various channels. KB5129194 for Windows 11 26H1 can be obtained via Windows Update, Windows Update for Business, the Microsoft Update Catalog, and Windows Server Update Services (WSUS). The out-of-band updates for Windows Server 2022 and Windows Server 2025 are accessible through the Microsoft Update Catalog.

Beyond RDS, the out-of-band Windows 11 updates also address a Hyper-V issue impacting applications that utilize Host Compute Service (HCS)-managed virtual machines. Some applications experienced difficulties when attempting to share Windows host folders with Linux virtual machines using Plan9, resulting in shared folders either not appearing or becoming inaccessible within the guest environment.

Furthermore, the updates resolve an audio problem affecting certain USB Audio Class 1.0 devices when operating in multichannel audio modes, such as 8-channel and 3D audio. While these devices functioned normally in standard stereo mode, they could fail when switching to multichannel configurations.

However, these emergency updates do not resolve all USB audio problems introduced by the September updates. Microsoft has stated that some USB Audio Class 1.0 devices may still fail to start or produce audio after installing the September 8, 2026, security update. Symptoms can include a "This device cannot start (Code 10)" error in Device Manager, no audio output, unresponsive volume controls, or unavailable sound settings. This specific issue is confined to USB Audio Class 1.0 devices, and Microsoft is actively working on a further fix for the remaining audio problems.

patch
ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Canadian cybersecurity executive arrested in federal extortion case

A Canadian cybersecurity executive was arrested in Pennsylvania on Thursday, facing federal charges of conspiracy to commit extortion. Edward Dubrovsky, 54, a co-founder and former Chief Operating Officer of CYPFER, a firm specializing in ransomware negotiation, is charged with conspiring to threaten the confidentiality of information for extortion and conspiring to commit Hobbs Act extortion,…

breach

Criminal IP Introduces AITEM as the Next Evolution of Attack Surface Management

AI SPERA, the company behind the cyber threat intelligence platform Criminal IP, has announced AITEM (AI-Powered Threat Exposure Management), an expansion of its Attack Surface Management (ASM) offerings. AITEM aims to move beyond traditional asset discovery to provide a more comprehensive approach to understanding, prioritizing, and responding to security exposures. The platform is scheduled…

ai

AI Is Getting Really Good at Messing With Cybercriminals

Anti-cybercrime initiatives are increasingly deploying artificial intelligence to disrupt scammers by engaging them with lifelike bots, which the criminals mistake for genuine victims. This strategy aims to waste scammers' time and resources while gathering intelligence on their operations.

ransomware

FBI Arrests Ransomware Negotiation Firm Co-Founder in ShinyHunters Probe

The Federal Bureau of Investigation (FBI) has reportedly arrested Edward Dubrovsky, a co-founder of the ransomware negotiation firm Cypfer and currently associated with CyberSteward. The arrest is said to be part of the ongoing ShinyHunters investigation, specifically in connection with an incident involving FBI job applicant data.

ai

The Third-Party Agent Problem: Why Security Built for AI You Chose Misses the Agents You Didn't

A new report highlights a significant blind spot in enterprise security architectures concerning the proliferation of third-party AI agents. The forthcoming 2026 State of Agent Security Report indicates that current security models, often designed to protect AI systems directly chosen and deployed by an organization, frequently fail to account for AI capabilities embedded within third-party…

security

Insider Cyber Extortion Plot Against Industrial Firm Lands Engineer in Prison

A former core infrastructure engineer has been sentenced to prison for an attempted cyber extortion plot against an industrial firm. The engineer reportedly deleted administrative accounts and reset hundreds of user passwords, subsequently demanding a ransom of 20 Bitcoin to prevent further disruption to the company's servers.