Windows 11 is getting a major privacy upgrade, blocks apps spying on your camera and mic with new controls

windowslatest.com Aug 19, 2026

Windows 11 is getting a major privacy upgrade, blocks apps spying on your camera and mic with new controls

Curated by Shubham · TechCapsules · Aug 19, 2026

AI-summarised brief · reviewed before publication

Microsoft has introduced granular privacy controls for Win32 desktop applications in Windows 11’s latest Experimental build (26340.9212). Users can now toggle microphone, camera and location access for each individual desktop app—such as Chrome, Edge, Brave or Steam—through Settings → Privacy & security, mirroring the permission model long available to Microsoft Store apps. The previous system offered a single global switch for all desktop programs, preventing selective denial. The update also adds a centered permission dialog that prompts users when a desktop app first requests a protected resource. IT administrators can now enforce policies, reducing the risk of data capture by software. The feature is still in testing, rolled out via the Experimental channel on August 17, 2026, and may change before a public release.

💡 Why It Matters

· By giving users per‑app control over microphones and cameras, Windows 11 closes a long‑standing privacy gap between legacy desktop software and modern Store apps, limiting silent surveillance on personal PCs.

Read full article on windowslatest.com

Critical macOS, SharePoint, vCenter, and Microsoft IKE Flaws Under Active Exploitation

The U.S. Cybersecurity and Infrastructure Security Agency added four critical vulnerabilities—macOS, SharePoint, VMware vCenter, and Microsoft IKE—to its Known Exploited Vulnerabilities catalog after confirming active exploitation. Apple’s flaw was used to deploy a Monero miner, SharePoint was abused following a public PoC, vCenter was targeted by a China‑linked APT deploying backdoors and reverse_ssh binaries, and Microsoft IKE was leveraged by a Chinese‑speaking actor in an AI‑driven campaign. The attacks affected 361 IP addresses in 47 countries, with Germany, the U.S., Turkey, Iran, and France most impacted.

💡 The coordinated use of multiple high‑profile exploits demonstrates how quickly patched vulnerabilities can be weaponized, underscoring the need for rapid, cross‑vendor patch management and threat intelligence sharing.

windowslatest.com · Aug 18

Microsoft admits it made Windows 11 worse than Windows 10 for right-click…

Microsoft has acknowledged that Windows 11’s right‑click menu became cluttered and sluggish, and it is rolling out a redesigned, faster layout that restores quick access to common commands and offers user control over extensions. The update, released to Windows Insiders on August 17 as Experimental Build 26340.9212, replaces the previous menu that had inherited many of the same issues it was meant to fix. Microsoft’s public admission marks a rare reversal of its earlier 2021 stance that Windows 10’s context menu was the problem.

💡 The fix restores a core productivity feature that many users rely on daily, demonstrating Microsoft’s willingness to correct a high‑profile design flaw and improve overall system responsiveness.

thehackernews.com · Aug 18

Microsoft Copilot Personal Flaws Could Let One Click Exfiltrate Data From Connected…

Varonis Threat Labs exposed three vulnerabilities in Microsoft Copilot Personal, dubbed CoSnitch, that allow a single click on a crafted link to silently exfiltrate data from connected apps. The flaws exploit an undocumented URL parameter (autorun=1) that bypasses user interaction, enabling the assistant to pull sensitive information such as email metadata, calendar details, and Google Drive summaries. Microsoft reported the issue in December 2025 and released patches on August 18, 2026. No evidence of wild exploitation was found.

💡 The discovery shows that even consumer‑grade AI assistants can be weaponized for covert data theft, underscoring the need for stricter input validation and monitoring of AI‑driven workflows.

windowscentral.com · Aug 18

On This Day in 2015, Xbox laid out a “games everywhere” strategy…

On this day in 2015, Xbox announced a transformative “games everywhere” strategy, marking a pivotal shift in the brand’s operational philosophy. This ambitious initiative aimed to expand gaming accessibility beyond traditional console hardware, targeting a broader ecosystem of devices. The strategy fundamentally redefined Microsoft’s approach to interactive entertainment, prioritizing software and services over proprietary hardware exclusivity. Over the subsequent eleven years, this vision guided major corporate decisions, including the development of cloud gaming services and cross-platform compatibility features. It established a new industry standard for multi-platform availability, influencing how major publishers distribute content. The move signaled a departure from the closed-loop console model that had defined previous generations. By focusing on user access rather than device ownership, Xbox sought to maximize its player base globally. This long-term commitment reshaped the competitive landscape, forcing rivals to adapt to a more fluid, service-oriented market. The strategy’s enduring impact is evident in the current state of the gaming industry, where platform boundaries are increasingly blurred. Microsoft’s early bet on ubiquity proved prescient, laying the groundwork for its modern gaming identity and future acquisitions.

💡 Microsoft’s pivot from hardware-centric exclusivity to platform-agnostic accessibility fundamentally altered the value proposition of gaming subscriptions. This strategic shift forced competitors to prioritize service ecosystems over console sales, accelerating the industry’s transition toward cloud-based, cross-platform experiences.

windowscentral.com · Aug 18

Microsoft disables Windows 11’s new “Ask Copilot” Taskbar feature to “incorporate feedback”…

Microsoft has temporarily disabled the “Ask Copilot” feature on the Windows 11 taskbar as it consolidates the consumer Copilot and Microsoft 365 Copilot into a single app. The change follows a recent update that removed consumer support for the feature, leaving only commercial users with access. The company cited the need to incorporate user feedback and update the experience, but did not detail the adjustments. Users will revert to the standard Windows Search interface until the new Copilot integration is released.

💡 The move signals Microsoft’s prioritization of a unified AI experience over fragmented taskbar integrations, reshaping how consumers will interact with Copilot across Windows.

thehackernews.com · Aug 18

TWINLOOT Abuses SharePoint and Teams to Steal Credentials and Move Across Networks

Cybersecurity researchers uncovered TWINLOOT, a Python-based implant that hijacks Microsoft 365 services for command‑and‑control. The malware uses SharePoint Online dead‑drops, Microsoft Teams TURN servers, and a headless Edge browser to blend malicious traffic with legitimate activity. It harvests Windows credentials via fake lock screens, establishes a reverse SOCKS5 tunnel for lateral movement, and can execute arbitrary commands and maintain persistence. The tool was discovered during an investigation into a July 2026 campaign attributed to the Chaos ransomware group.

💡 TWINLOOT’s exploitation of trusted cloud services reveals a new vector that bypasses traditional perimeter defenses, forcing security teams to scrutinize legitimate Microsoft traffic for hidden malicious activity.