Security Digest - April 30, 2026

Daily security intelligence briefing for infrastructure and endpoint management teams. Consolidated from authoritative research, vendor advisories, and community discussions.

• Generated (UTC): 2026-04-30 15:44:16 +00:00
• Lookback window: 7 days

🚀 Top Research & Advisories

• CVE-2026-23751 - (NVD) Kofax Capture, now referred to as Tungsten Capture, version 6.0.0.0 (other versions may be affected) exposes a deprecated .NET Remoting HTTP channel on port 2424 via the Ascent Capture Service that is accessible without authentication and uses a defa…

  Action: Review .NET runtime vulnerabilities and apply patches.

• How three-layer tenant isolation works without dedicated infrastructure per client. - (Reddit r/sysadmin) I recently posted about multi-tenant observability and the most common follow-up question was some version of "but is that actually isolated?" So thought I’d elaborate on how I’m isolating tenants in my monitoring stack. The default mental…

  Action: Review CA/MFA settings for tightening opportunities. Validate Edge/WebView2 coverage; refresh managed package.

• When all you have is a password manager, everything starts looking like a password - (Reddit r/cybersecurity) I've been thinking, and ya, I know that is a dangerous thing. "When all you have is a password manager, everything starts looking like a password" That is a problem. Password managers are great for logins. That is what they were built f…

  Action: Review CA/MFA settings for tightening opportunities.

💻 AppSec

• How am I supposed to move the window properly? - (Reddit r/Windows11) Monitor developer tool vulnerabilities and supply chain risks.

🏗 Infrastructure

• AI security incidents timeline from Dec 2025 - Apr 2026. Asking for a more professional perspective - (Reddit r/cybersecurity) Review security controls and policy updates. Review sensor guidance and deployment posture. Review VPN client version and deployment.

• DNS Forwarder stopped working after April 2026 CU install on Windows Server 2022 Workgroup DNS server — Event ID 404 - (Reddit r/sysadmin) Evaluate update rings and expedite actions if needed. Review server hardening and AD security posture.

• IT admins can now upgrade to Windows Server 2025 via Windows Update - (Neowin) Evaluate update rings and expedite actions if needed. Review server hardening and AD security posture.

🛡 Security Ops

• 365 Conditional Access policy applied when it shouldn’t - (Reddit r/sysadmin) Review CA/MFA settings for tightening opportunities.

• AI security incidents timeline from Dec 2025 - Apr 2026. Asking for a more professional perspective - (Reddit r/cybersecurity) Review security controls and policy updates. Review sensor guidance and deployment posture. Review VPN client version and deployment.

• Recent MS Purview issues with PDF files - (Reddit r/cybersecurity) Confirm Adobe exposure; push updated deployment. Review CA/MFA settings for tightening opportunities.

🛠 Infrastructure & Endpoint Control

• “We’re doing the work required to win back fans across Windows and Xbox”: Microsoft CEO Satya Nadella says the company is making foundational changes to fix Windows 11 and Xbox - (Reddit r/Windows11) Validate workstation security baseline and update compliance.

• AI may be coming to Windows 11’s Clock app as Microsoft turns it into a focus tool - (Reddit r/Windows11) Validate workstation security baseline and update compliance.

• AI security incidents timeline from Dec 2025 - Apr 2026. Asking for a more professional perspective - (Reddit r/cybersecurity) Review security controls and policy updates. Review sensor guidance and deployment posture. Review VPN client version and deployment.

• April KB5083769 Windows 11 update causes backup software failures - (BleepingComputer) Validate workstation security baseline and update compliance.

• Developing a cross-process reader/writer lock with limited readers, part 1: A semaphore - (The Old New Thing) Confirm Adobe exposure; push updated deployment.

• Developing a cross-process reader/writer lock with limited readers, part 2: Taking turns when being grabby - (The Old New Thing) Confirm Adobe exposure; push updated deployment.

• Developing a cross-process reader/writer lock with limited readers, part 3: Fairness - (The Old New Thing) Confirm Adobe exposure; push updated deployment.

• Display settings enhancer app (see photo) - (Reddit r/Windows11) Validate Chrome coverage; update managed package if needed.

• DNS Forwarder stopped working after April 2026 CU install on Windows Server 2022 Workgroup DNS server — Event ID 404 - (Reddit r/sysadmin) Evaluate update rings and expedite actions if needed. Review server hardening and AD security posture.

• For the people who are using Translucent TB with dark wallpaper and cant see clock as it’s in black font. Here is the fix - (Reddit r/Windows11) Validate workstation security baseline and update compliance.

• Gemini can now generate and export Microsoft Office files directly from chat - (Neowin) Review Office update channel health and security baseline compliance.

• Has anyone noticed this about the Windows Calculator? - (Reddit r/Windows11) Validate workstation security baseline and update compliance.

• How do I automate onboarding ? - (Reddit r/sysadmin) Review Office update channel health and security baseline compliance.

• How many computer languages can you work on (language, level of understanding, and job position)? - (Reddit r/cybersecurity) Review security controls and policy updates.

• Intel improves Windows 11 and 10 Wi-Fi and Bluetooth with new drivers - (Neowin) Validate workstation security baseline and update compliance.

• IT admins can now upgrade to Windows Server 2025 via Windows Update - (Neowin) Evaluate update rings and expedite actions if needed. Review server hardening and AD security posture.

• Microsoft engineer says native apps are back, and it could finally revive Windows 11’s fight against web apps - (Reddit r/Windows11) Validate workstation security baseline and update compliance.

• My Windows 11 Desktop Interface - (Reddit r/Windows11) Validate workstation security baseline and update compliance.

• O365 Outlook issues today? - (Reddit r/sysadmin) Review Office update channel health and security baseline compliance.

• Recent MS Purview issues with PDF files - (Reddit r/cybersecurity) Confirm Adobe exposure; push updated deployment. Review CA/MFA settings for tightening opportunities.

• Satya Nadella admits Microsoft needs to “win back” Windows 11 fans, improve performance for low RAM PCs - (Reddit r/Windows11) Validate workstation security baseline and update compliance.

• Save 64% on an Microsoft Office 2024 Home & Business for PC digital license - (Neowin) Review Office update channel health and security baseline compliance.

• Son Windows 11 astuce - (Reddit r/Windows11) Validate workstation security baseline and update compliance.

• TIP: Add a right-click ‘Unblock Files’ option to Windows Explorer to fix the File Explorer preview warning in bulk - (Reddit r/Windows11) Validate workstation security baseline and update compliance.

• Upcoming Samsung Galaxy Book laptops may ditch Windows 11 in favor of Android 17 - (Neowin) Validate workstation security baseline and update compliance.

• Windows 11 file ‘Share’ does not have an option for Bluetooth in it (forces user to use classic right-click to access Bluetooth context menu). Microsoft please add Bluetooth to the options for Share too! - (Reddit r/Windows11) Validate workstation security baseline and update compliance.

• Windows 11 installation failed on 11% for custom install.wim - (Reddit r/sysadmin) Validate workstation security baseline and update compliance.

• Windows 11’s hidden Screen Tint feature lets you soften your display with amber, blue, green, and more colors - (Reddit r/Windows11) Validate workstation security baseline and update compliance.

• you can actually update from Windows 8.1 to Windows 11 by using WU in 2026 =1 - (Reddit r/Windows11) Validate workstation security baseline and update compliance.

🩹 Patch Tuesday & Update Experience

• DNS Forwarder stopped working after April 2026 CU install on Windows Server 2022 Workgroup DNS server — Event ID 404 - (Reddit r/sysadmin) Hi, I have a Windows Server 2022 Workgroup (non-domain) server running DNS role only as a forwarder. It forwards all queries to 2 internal DC/DNS servers. Clients point directly to this server for DNS…

🔍 Quick Links (Watch Items)

• CVE-2026-31431 eBPF fix - (Reddit r/cybersecurity)
• How many computer languages can you work on (language, level of understanding, and job position)? - (Reddit r/cybersecurity)
• How three-layer tenant isolation works without dedicated infrastructure per client. - (Reddit r/sysadmin)
• Windows 11 installation failed on 11% for custom install.wim - (Reddit r/sysadmin)
• AI security incidents timeline from Dec 2025 - Apr 2026. Asking for a more professional perspective - (Reddit r/cybersecurity)
• Hi! We are Flare.io - (Reddit r/cybersecurity)
• How do I automate onboarding ? - (Reddit r/sysadmin)
• How do teams preserve and verify evidence from existing security logs before/during incident response? - (Reddit r/cybersecurity)
• Does a short public key fingerprint is at risk if there is central registry? - (Reddit r/cybersecurity)
• Advice for a 7-hour marathon CTF? (Transitioning from picoCTF) - (Reddit r/cybersecurity)