LIVE · cybersecurity feed
Live wire
Malware Hijacks Android Car Head UnitsCritical Flaw in NASA/JPL Open-Source Spacecraft Command Software Allowed Unauthenticated Command ExecutionCVE-2026-73570 · U.S. CISA adds Zimbra Collaboration Suite (ZCS) flaw to its Known Exploited Vulnerabilities catalogCVE-2024-3094 · Connecting the Dots: Securing the Overlooked Corners of the Software Development Lifecycle (SDLC) Supply Chain14 Trojanized npm Packages Drop RedC2 4.0 Linux Backdoor With AI-Assisted C2Hundreds of leaked AWS keys give full control over corporate accountsAndroid Car Malware Spreads Through Built-In Updaters for Ad Fraud, Proxy BotnetMalware injected into popular Rust packages to steal developer credentialsSix Maximum-Severity Flaws Found in Cisco ProductsCritical Isolated-vm Vulnerability Leads to RCE on Host
microsoft

Microsoft to enable Windows settings backup by default for orgs

Microsoft is making its Windows settings backup and restore feature the default for business organizations. This update will automatically apply to devices managed by Microsoft Entra that are upgraded to Windows 11 version 26H2.

zeroday.news ·

Microsoft will enable its Windows settings backup and restore tool by default for enterprise systems that are joined to Microsoft Entra or are Microsoft Entra hybrid-joined, beginning with the Windows 11 26H2 update. This change will apply to eligible devices where administrators have not explicitly configured the backup and restore policy.

The tool, previously known as Windows Backup for Organizations, is designed to facilitate the backup and restoration of enterprise users' Windows settings following events such as device resets, replacements, upgrades, or reimaging. It was initially introduced as an opt-in feature at the Microsoft Ignite conference in November 2024, entered public preview in May 2025, and achieved general availability in August 2025. Its functionality became accessible after installing the September 2025 Windows Monthly Cumulative Update on Entra-joined devices, though IT administrators were required to manually enable it through policy configurations.

According to a recent update to Microsoft's message center, the default behavior for the Windows settings backup policy will transition from disabled to enabled with Windows 11 version 26H2. This default-on setting is specifically for eligible devices and will only take effect if administrators have not previously set a specific policy. Any explicit configurations for enabling or disabling the backup and restore settings will continue to be honored.

The default-on behavior for Windows backup will be limited to devices running Windows 11 26H2 that are located in countries or regions not subject to the EU Digital Markets Act (DMA). It will also exclude devices operating within sovereign or restricted cloud environments, and those for which the backup policy has not been configured.

Even on systems where the tool is enabled by default, IT administrators will maintain complete control through mobile device management (MDM) solutions. Administrators who wish to disable the backup policy can do so using Microsoft Intune or Group Policy, as these explicit settings will override the default behavior. It is important to note that the restore functionality itself will not be enabled by default; users will still require explicit administrative configuration to restore Windows devices.

Microsoft product manager Miranda Leschke indicated that organizations can test this updated experience early. The default-on behavior is currently available for Windows 11 version 26H2 within the Windows Insider Program's Experimental channel, starting in July 2026. The broader rollout for eligible devices is expected to coincide with the general availability of Windows 11 version 26H2 later this year. Devices that were initially running Windows 11 version 26H1 will receive the same default-on treatment with their subsequent feature update.

microsoftwindowsbackupenterprisesecurity
ShareXLinkedInWhatsAppFacebook

More News

view all →
security

Postal Service moves to finalize mail ballot regs before SCOTUS ruling

The rules have already been rejected by multiple state courts, but the Trump administration said it’s preparing in case of a favorable Supreme Court decision. The post Postal Service moves to finalize mail ballot regs before SCOTUS ruling appeared first on CyberScoop.

vulnerability

ToxicPanda 2.0 Gets a Major Upgrade, Expanding Attacks Across 16 Countries

ToxicPanda 2.0 targets 349 financial apps and abuses Android Wireless Debugging to gain deeper device access and steal banking credentials. ToxicPanda used to be a Europe-focused nuisance targeting a manageable list of banks. That version is gone. Zimperium’s zLabs team just documented ToxicPanda 2.0, and the numbers alone tell the story: 349 targeted financial institutions […]

ai

If you're not using AI to attack your own systems, your adversaries will

Agents are also the new attack surface - cue defenders' existential angst

privacy

TikTok Agrees to $400 Million Settlement in U.S. Child Privacy Lawsuit

TikTok has agreed to a $400 million settlement with the U.S. Department of Justice to resolve a lawsuit alleging violations of child privacy laws. The lawsuit, filed in 2024, accused the company of improperly collecting data from users under 13 and failing to comply with parental requests to delete accounts. The settlement includes an immediate payment of $300 million and an additional $100 million contingent on the dissolution of a prior consent decree related to Musical.ly.

malware

Hackers infect Android car head units with proxy botnet malware

A supply-chain attack targeting Android-based car head units is using a legitimate device-update app to spread malware that enlists compromised devices in a proxy botnet or uses them for ad fraud. [...]

security

Named Pipes Under Attack: Securing Windows Interprocess Communication

Windows named pipes provide fast interprocess communication, but weak access controls can expose privileged services to untrusted processes. ThreatLocker explains how endpoint verification, command authorization, strict input validation, and narrowly scoped privileges can help secure named-pipe communication. [...]