Microsoft explains why Windows remembers your USB drives even after you unplug them

windowslatest.com Sep 29, 2026

Microsoft explains why Windows remembers your USB drives even after you unplug them

Curated by Shubham · TechCapsules · Sep 29, 2026

AI-summarised brief · reviewed before publication

Microsoft clarified that Windows stores registry entries for USB mass‑storage devices to enable quick reconnection and driver configuration. The entries, located under HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Enum\USBSTOR, include device names, serial numbers, and drive letters but not file contents. The system retains these “phantom” records because it cannot distinguish temporary from permanent removal. Similar logging exists on Linux and macOS, and the data can be viewed via PowerShell or Device Manager. Resetting the PC does not automatically delete these entries.

💡 Why It Matters

· Knowing that Windows only keeps metadata—not user files—helps users assess privacy risks when donating or selling devices.
· It also explains why device history persists across reboots, informing troubleshooting and security practices.

Capsules Windows

Read full article on windowslatest.com

Five things Windows 11 quietly keeps about you, and which ones actually…

A viral X post claimed Windows 11 secretly stores thumbnails of every deleted photo in thumbcache_256.db, sparking user concern. The claim is exaggerated: Windows uses a global thumbnail cache to speed preview generation, similar to macOS, Linux, and Android. Deleted images are not automatically cached unless viewed in Explorer’s thumbnail view. Users can clear the cache via Disk Cleanup or disable caching on Pro and higher editions through Group Policy. The article debunks the myth and explains how to manage the cache.

💡 The post inflates privacy fears, yet the cache is a standard performance feature that can be easily removed or disabled, underscoring the importance of understanding OS defaults before reacting.

windowscentral.com · Sep 25

The Manchester United Surface Laptop is the greatest laptop of all time

Richard Devine, Managing Editor at Windows Central, dedicates his professional life to covering Windows, PCs, open‑source software, and gaming. He balances a deep immersion in the Windows ecosystem with a strong affinity for the terminal, regularly scouring GitHub for emerging tools and refining Windows Subsystem for Linux (WSL) workflows to bridge Windows and Linux environments. Devine’s personal gaming routine includes extensive sessions in titles such as The Division 2, Forza Horizon, and Call of Duty, reflecting his commitment to both gameplay and the surrounding community. Through his editorial role, he aims to deliver the latest information, practical utilities, and enhanced user experiences to readers, positioning himself as a conduit between technical developments and everyday PC users.

💡 Devine’s dual focus on enterprise‑grade Windows coverage and grassroots open‑source discovery equips a broad audience with actionable insights that keep both power users and casual gamers ahead of rapid platform changes.

windowscentral.com · Sep 24

uBlock Origin broke on Edge, so I finally quit the browser

Sean Endicott, a seasoned Windows Central journalist, reports on Windows 11, Surface hardware, Microsoft 365, AI, and the broader Windows ecosystem. Since 2017, he has produced over a thousand articles, covering breaking news, feature stories, and analysis. Endicott also writes the weekly Windows Wrap column, curating key stories across Windows and the PC market. He holds a First Class degree in Broadcast Journalism from Nottingham Trent University and brings experience from live production and media. Outside tech, he coaches youth American football in Nottingham, earning the 2024 BAFCA Youth Coach of the Year award.

💡 Endicott’s deep coverage informs users about critical updates and strategic shifts within Microsoft’s ecosystem, shaping how consumers and businesses adapt to new technologies. His dual expertise in journalism and coaching demonstrates a blend of analytical rigor and community engagement, enriching the tech narrative with real‑world relevance.

nypost.com · Sep 24

We found a way to get 6 Office apps for life for…

Microsoft offers a one‑time purchase of Office 2024 Professional Plus for Windows at $49.97, down from the $249.99 MSRP, until October 4. The bundle includes Word, Excel, PowerPoint, Outlook, OneNote, and Access, each priced under $9 for permanent use. The license is device‑bound via a unique key, eliminating subscription fees and linking to the PC rather than a Microsoft account. The offer targets users upgrading PCs or needing a new license, with instant download and activation after purchase. The deal requires Windows 10 or 11.

💡 It delivers full Office functionality without recurring costs, reshaping how consumers budget for productivity software.

windowslatest.com · Sep 23

Microsoft confirms Windows 11 quietly stopped backing up your files due to…

Microsoft confirmed that the September 2026 Windows 11 update (KB5124008) introduced a bug that disables File History backups for most users. The feature, which automatically backs up libraries to external or network drives, now fails to recognize connected drives and shows incorrect timestamps. Microsoft acknowledged the issue on September 22, noting false “reconnect your drive” alerts and potential crashes of FileHistory.exe. The problem affects nearly all installations of the 25H2 and 24H2 builds.

💡 Users relying on File History for data protection are suddenly left without a reliable backup mechanism, risking accidental data loss. The bug undermines a core Windows 11 feature that many depend on for file recovery.

thehackernews.com · Sep 23

This Windows Malware is Built to Let Up to Four AI Models…

Cisco Talos uncovered a Windows malware named CLOSEDQUORUM that delegates command decisions to up to four commercial AI services—DeepSeek, Qwen, Mistral, and Google Gemini—instead of a traditional command‑and‑control server. The code, dated June 17, 2026, instructs the AI models to choose from four actions: steal credentials, inject code, persist, or move. The malware reports its choices and stolen data to an attacker‑controlled Discord channel via a webhook. The public sample contains placeholder API keys, rendering it non‑functional, but Talos confirmed the design and potential impact.

💡 By outsourcing attack logic to AI, CLOSEDQUORUM introduces a novel, decentralized threat model that can evade conventional detection tied to known C2 domains. This approach forces defenders to monitor anomalous AI‑service interactions and internal Windows behaviors rather than relying solely on domain blacklists.