More software to patch.

Source

Microsoft shipped Autoruns 1.0 for Linux and Process Explorer 1.0 for macOS, bringing two familiar Sysinternals utilities past the Windows-only line. On Linux, Autoruns is a CLI scanner that catalogs startup hooks such as systemd services, cron jobs, and browser add-ons. On macOS, Process Explorer is a native client with a live process tree, code-signing review, and Apple Silicon core detail. That same drop also refreshes the Linux builds of ProcDump, Procmon, and Sysmon, plus multiple Windows tools. This walkthrough explains what the two ports do, how to install them, and where they still fall short.

Source

The Microsoft Paint fix for CVE-2026-83844 is now available through the Microsoft Store after the patched version proved difficult to obtain. The fixed build appeared in Store checks across ten countries on November 6, but Windows Update will not deliver it. How quickly Store auto-update will reach other PCs remains unclear.

Source

Microsoft’s accelerated app launches require Windows 11 25H2, 26H1, or 26H2 and Edge 150 or later, leaving older Windows versions without the improvement. The feature speeds up Edge launches by skipping an intermediary process when the browser is already running.

Source

Microsoft PowerToys is a collection of desktop utilities for Windows. Its 0.102.3101 hotfix resolves Mouse Without Borders pairing failures, improves File Explorer thumbnail handling, and restores optional diagnostic reporting.

Source

Microsoft is reportedly planning Windows 11 27H2 for 2027, with performance, reliability, and quality improvements taking priority. The rumored release could be a full OS upgrade, building on reports of a larger-than-usual 27H2 refresh. Microsoft has not confirmed the release or ruled out Windows 12.

Source

The Exchange Online Admin API lets applications automate administrative tasks; Microsoft says organizations using its outgoing permissions have until November 30, 2026, to migrate. Replace delegated access permission Exchange.ManageV2 with Exchange.AdminAPI.Manage, and app-only permission Exchange.ManageAsAppV2 with Exchange.AdminAPI.ManageAsApp. The old permissions are set to be deprecated on December 1 for worldwide tenants.

Source

Scott Hanselman’s gputaskman is a GPU monitor for Windows, Linux, WSL, and Apple Silicon Macs. It breaks down GPU activity by process, including local AI models, and shows details such as VRAM use, model weights, and quantization. The portable Windows build requires no installation, but the utility is experimental.

Source

Microsoft’s November 10 Patch Tuesday will be the final update for Windows 11 23H2 Enterprise and Education, making upgrades urgent for organizations still running it. Microsoft recommends moving eligible devices to Windows 11 25H2 to keep receiving monthly updates. The forecast also points to updates from Microsoft, Adobe, Google, and Mozilla.

Source

Microsoft 365 Copilot’s data loss prevention (DLP) controls block it from using content restricted by policy. In public preview, admins can now change the help link shown when a block occurs, directing users to their organization’s compliance guidance instead. Microsoft plans general availability for December 2026.

Source

GPT-6 Cyber is OpenAI’s model for finding software vulnerabilities, testing their impact, and helping develop fixes. OpenAI says it uncovered 81 previously unknown high-severity Firefox flaws and developed working exploits for 948 Linux kernel vulnerabilities. The model is initially available through the API and Codex to approved Daybreak Red customers.

Source

Mistral Studio lets businesses build AI agents, workflows, and apps connected to their data and systems. Its new managed agents can run code and delegate tasks, while apps add hosting and access controls for employee-facing tools. The platform supports cloud, private cloud, and on-premises deployments.

Source

Gemini Omni 1.2 Flash generates videos from prompts and reference material across Google’s developer and creative tools. The update adds native clips up to 15 seconds, conversational editing, and stronger consistency, while cutting the 720p price to $0.07 per second.

Source

Inkling 2 Small is Thinking Machines Lab’s mixture-of-experts model, with 594 billion total parameters and 17 billion active. It is available now for inference and fine-tuning on Tinker, and supports image inputs and adjustable reasoning effort. The company plans to release its weights under Apache 2.0 next week, after external safety testing.

Source

Perplexity Computer is an AI service that uses agents to complete tasks; its new Teammates feature turns those agents into persistent workers for ongoing projects. They can take on different roles, reuse existing projects and memory, and coordinate through Slack. Teammates are available on the web to Perplexity Max subscribers, a plan priced at $200 per month.

Source

A PowerShell MCP server lets Claude Desktop call specific Windows functions instead of generating commands for an administrator to run. A guide builds one with PSMCP and four read-only checks for disk space, services, system events, and pending reboots. But the early-stage module has defects that can break tool discovery or leave calls hanging, and the server runs with the signed-in user’s permissions.

Source

Matthew Berman reviews a wave of AI model releases, from Moonshot’s Kimi K3.1 Pro to new computer-use, image, video, and science models. The roundup highlights open weights, faster generation, and smaller models designed for specific tasks. It also covers tools for document retrieval, voice-driven actions, and coding.

Source

Microsoft is overhauling Microsoft 365 Education, adding a free Windows-only student plan and a premium A7 bundle with Copilot and advanced security. Schools can choose student and faculty licenses with or without Teams. Pricing changes begin at renewals from May 1, 2027; most plan retirements start at renewals from January 1, 2028.

Source

Cloudflare has launched the Trusted Agent Delegation coalition to develop shared standards for AI agents acting on the web. It is also rolling out site controls that let customers see agent traffic, set access rules, and identify which agent made a login or sign-up request. These changes aim to help websites manage automated activity without blocking every user of a shared agent.

Source