Blog

In this episode of First Ring Daily, Brad Sams and Paul Thurrott discuss the Snapdragon C, Qualcomm’s new entry-level chip for laptops that will cost $300 and up.

Microsoft has acknowledged a new issue in Windows Server 2016 where domain controller discovery may fail after installing the May 2026 KB5087537 security update. The problem specifically affects Windows Server machines with certain hostname conditions, which disrupt critical network and administrative functions. Domain controller lookup is a process in Active Directory that allows a computer…

Keeping servers secure has long meant disruptive restarts, but Microsoft is changing that approach with a major update. With Windows Server 2025, hotpatching enabled by Azure Arc is now available at no additional cost, allowing organizations to apply critical security fixes in real time without interrupting operations. Hotpatching is a feature that allows security updates…

Microsoft has released security updates to fix a high-severity remote code execution vulnerability in Microsoft SharePoint Server that could allow attackers to compromise vulnerable servers. This flaw could be exploited by attackers with only minimal access privileges, potentially enabling malicious code execution without requiring administrator rights. CVE‑2026‑45659 is a remote code execution (RCE) vulnerability that…

Microsoft has enhanced Windows Autopatch with a new Secure Boot status report that improves visibility into device readiness for certificate updates. The update enables IT teams to move beyond policy-based checks and make more informed, data-driven rollout decisions. Secure Boot is a security feature that ensures a device starts only with trusted, digitally signed software,…

The US Federal Bureau of Investigation has issued a warning about a new Phishing-as-a-Service platform called Kali365, which is designed to compromise Microsoft 365 accounts. This cybercrime tool enables attackers to bypass traditional security protections and gain persistent access to accounts without raising suspicion. Phishing‑as‑a‑Service (PhaaS) is an emerging cybercrime model in which ready‑made phishing…

A routine software update has escalated into a serious disruption for some HP laptop owners. Following recent BIOS firmware updates, customers are reporting system slowdowns, crashes, and blue screen errors across several high‑end models. Specifically, HP is investigating widespread complaints that certain BIOS updates are causing critical failures in premium business laptops. In some cases,…

A China-linked cyber-espionage group called Webworm is intensifying attacks against European government organizations by abusing trusted platforms and unconventional command-and-control techniques to hide in plain sight. This group blends malicious operations with legitimate cloud services and stealthy proxy networks to infiltrate, evade detection, and maintain long-term access to high-value systems. According to security vendor ESET,…

If your Windows PCs or servers are running low on storage and you cannot tell what is actually consuming the space, WinDirStat is one of the easiest tools to use. It scans a drive or folder and shows the results as a directory list, file type breakdown, and visual treemap, making it easier to spot…

In this episode of First Ring Daily, Brad Sams and Paul Thurrott discuss the latest Intel-powered Surface for Business from Microsoft and the company’s ongoing work to improve the core fundamentals of Windows 11.

Microsoft has detailed the recent security enhancements designed to give organizations stronger oversight, management, and defense across increasingly complex digital environments. These updates help ensure that data, applications, and operations remain secure and well‑governed across the entire ecosystem. First off, Microsoft has launched a new Claude Compliance API for Microsoft Purview. This new integration allows…

Microsoft has disrupted a cybercrime network by seizing its websites and shutting down hundreds of virtual machines used to issue fake code‑signing certificates. These certificates helped ransomware groups disguise malicious programs as legitimate software, which allowed large‑scale infections, even affecting some of Microsoft’s own systems. The cybercrime operation known as Fox Tempest has been active…