TechCapsules

Microsoft confirms Recycle Bin bug across all versions of Windows

Microsoft has confirmed a bug affecting all supported versions of Windows, including client and server, following the June Patch Tuesday update. The issue causes the Recycle Bin to display the internal file name instead of the actual name when attempting to delete an item. This unexpected behavior affects all versions of Windows, with Microsoft working on a solution to be released in a future update. Commercial customers can deploy a workaround, but details are available through Microsoft Support for Business.

💡 The Recycle Bin bug highlights Microsoft's struggle to balance security patches with user experience, raising questions about the company's testing procedures and the impact on its reputation.

Microsoft finally admits its default Windows 11 25H2, 24H2 action broke key…

Microsoft has acknowledged a compatibility issue with its default Windows 11 25H2 and 24H2 settings, which switched to JScript9Legacy to improve security. The change caused problems with older dependent apps and web-based components that relied on legacy behavior. Microsoft confirmed the issue stems from its move away from the older jscript9.dll engine in favor of jscript9legacy.dll, which changes how JScript handles execution context. The company has published a support article detailing the problem and provided a Registry setting to enable persistent JScript execution context.

GitHub Malicious Repositories: 10,000 Trojan Clones Evade Detection for Over a Year

A security researcher has discovered that approximately 10,000 GitHub repositories have been distributing Trojan malware to developers for over a year without being flagged or removed by the platform's automated security systems. The malicious repositories were created by cloning legitimate projects and adding a link to a downloadable ZIP archive containing a Trojan payload. The attackers exploited GitHub's trust signals and anomaly-detection architecture, making it difficult for automated systems to detect the long-running threats. The researcher released an open-source detection tool and a list of the affected repositories after GitHub's security team failed to respond to prior disclosures.

💡 The widespread evasion of GitHub's security systems highlights a critical vulnerability in the platform's architecture, allowing malicious actors to quietly distribute malware to developers for extended periods. This structural gap underscores the need for more robust anomaly-detection mechanisms to prevent similar campaigns in the future.

Microsoft Joins Fight To Preserve EU-US Data Transfer Pact

Microsoft has joined the fight to preserve the EU-US data transfer pact, a crucial agreement that enables the transfer of personal data between the European Union and the United States. The pact's fate is uncertain due to ongoing legal challenges, with the European Court of Justice set to review the agreement. Microsoft's involvement underscores the significance of the pact for US tech companies, which rely heavily on international data transfers. The company's participation may influence the court's decision, as it brings significant resources and expertise to the case. The outcome will have significant implications for international business and data protection.

💡 Microsoft's involvement raises the stakes for the European Court of Justice, as the company's vast global operations make it a critical test case. The court's decision will set a precedent for other US tech companies.

Why Microsoft Authenticator ditched multiple-choice logins

Microsoft is rolling out a change to its Authenticator app, requiring users to manually enter a two-digit number for login verification instead of tapping one of three options. This update aims to improve security by reducing the risk of accidental approvals and spam attacks. The change first appeared for enterprise and education users, but has since started rolling out to personal Microsoft accounts. The update is part of Microsoft's efforts to phase out insecure SMS codes as an authentication option.

💡 The manual number entry requirement adds a crucial layer of security, making it significantly harder for malicious actors to exploit multi-factor authentication vulnerabilities. By reducing the risk of accidental approvals, Microsoft is taking a targeted approach to mitigate a common attack vector, ultimately strengthening user protection.

Microsoft sells OpenAI models in China. OpenAI and Anthropic won’t.

Microsoft has become the primary supplier of OpenAI models in China, selling the technology to the country's largest internet companies, including ByteDance, Ant Group, Meituan, and Tencent. The arrangement hands Microsoft a unique position, as it sells OpenAI models to Chinese firms that the model's creator, OpenAI, will not deal with directly. Microsoft's Azure AI revenue in China has expanded significantly, tripling in the financial year to June 2025. The company's contract with OpenAI allows it to set its own terms for selling GPT models abroad.

💡 Microsoft's dominance in the Chinese market for OpenAI models raises concerns about the potential misuse of the technology and the company's ability to police its use. The arrangement also highlights the tension between Microsoft's business interests and OpenAI's concerns about intellectual property and risk in the Chinese market.